last executing test programs: 9.64240791s ago: executing program 0 (id=1246): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 9.301839238s ago: executing program 0 (id=1248): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000009780)='./file0\x00', 0x8000, &(0x7f00000000c0)={[{@sysvgroups}, {@usrquota}, {@nolazytime}, {@ikeep}, {@nolargeio}]}, 0x1, 0x9730, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrget93/t+3HvPOc+zO9PVVTXV/1931cxUT/eS8yw258DA6ANDm2JgxG69a86FNt5xziv33WmvU6cYc/zJh00etsCkwy5OOmjYx5EGBgZGGraeYdPGeuykk0caGOW96f9orDHGHDTOwMB0wy7OPuzjTEM/TPT48PneHaERN3TQ3y8O2n7ov/cab8iXGPLJ0rdcdO7AwMD471t+yCLT/MsNlbbkHPPO8w+rv7sNsRo87PP3/xt16L+JHhwYmOi+Ab5/vH/eQR/BTRryNcff8aHR1/0Ivvb/uJacY975RvAf8lgcedi0mYY8xkd8DBob8X5+yyqz7jFsCN+7vw0MDNnF/dNj5X9ES84xzwIDH7yfH3hkzHHPfPe9/eZYzw0MjPX8wMBYLwwMjPXiwMBYLw0MjPXyR+1S/3fNMef0cw55vA+/PIx9+H15fLpf7Lv6S/sMDAyMNnSesd4ZerwYe4rhx4Sqqqr6790cc04/Fxz/R/+w4/9WW89xW8f/qqqq/7nNN8ec0w85jo9w/B/7w47/P7jppjWG/u5/9pmGLvXOR3sjqqqq6j/VPPPh8X/8Dzv+j7fDDQd0/K+qqvqf26ILvnf8H3uE4//EH3b8X2P+uy4fNt/w7xveft8q33v+2LDpb75v+sjvm/7G+6YPft963j//qO+b/tr7po8+MDDWY8Omv/WPyWM9N2SZf13PWK/84/k4k47yvumvvm/6qO+b/tqwbRoyfbT3TX/7ffOP/o/pYw/5b4phX/f1Dxnqqqqq/zYtOv08cw2873n2wyYPf2I/Pi/02GO3vvuj2t6qqqqqqqqq+s/3ztNnnPOPv/n+9MD7/nb173/DOuz3AoOOO++66z6yDf3v0aB//X3IFh/1Nv3fNsR59COmGBhYa4mPelPqI+h/zN+q1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/v/vf/8/cN9Xdhg26yyT3XX/Yv9YctKB1YZ9dutdcy602kew7R9B/1vP/w+sNmhgYJjv+EMsF5pj0cWnGhgYWOz+uyabceDv18085LpZJxz5vT/mHBiY6r3/B0/6AWse9i4L7725w8R/X8dx761/vnf3H3nQCBvxvmY794GDV13y1RlG/PilD74df39/iaVe2X/K4X/LMtIIM43+AQsPX//w2zKi87Btn2rItk+9wZrrTL3+xpt8fbU1l19lpVVWWmu66aadYfoZZ5jum7NMvfJqa6w0zdD/P2DMhr51xcj/zpiNPeKYPT3H+8dsxNs2wSkH45j967t6/NMq3lvj+bM9csXwMRvl3xyz4V9v5A8fsylWG/aFJh0YPLDce0MzaGBg0lEGD2w05MK0ow0MTDp42LyTDpn32xOONDCw4z9u6KBhLzY6dJ5BWwyZ57/Z+5bMMmxENh0+34ivsz7ihv5H71ty4ti73DXC+5b8v+r/6Pj/L14zD/r7QA1/A4Rh8wz1+ojfZ+JftneKUd47yH3Q9n7I6+K8F92/1lz18SX+q14Xh7Z37A/Z3g95Hb8P3N6ppn12z6Gr+i/b3hH2dQsMvfLf2dcNfPi+bmRafqWrJx9xXzf/B2/iPz2Oh4/RaCPM9EH7uh3nP3/zIesf+PB93QKrDXvxgH/s60YaGJh05OH7uiE7vlEHD+w45MJ0Qy6MNnjgsCEXpn/vwhgD5w258I0V1l5jxUHvvczAsPVOM2S9s084aOgD6OaDVx1tl3ffHWXYtrwy1j9v67D7xxTvP57PMeGwwRy27PD1Dpl1+Hpf22bodaMOW++r/4n1Dl+WtnfSs4deN9qw9b42wnoHf8h6hy/7L4+HqQb90xNVYX/zkb6vET1+R/+Q7f2Q1+HG+9t77lMu+8h/wetwD/qg7R3lw7f3g9435AO394krntzvv+p1w+l+dt++Q+8row+7n739n7j/Dl92xP3Y0BcCGbrbH/3f2Y9N8S/7sS1HHmmEwX5fH/R97oow/7BHxN/XtuJBr642fOwHj7De/+j73PfdlkGwHxt/hJ/nBm2+38AgGvPH1nhxw3d2/vAxHzzwzz9bDB/z4ct+2JiP9u+M+ac+fMxH/D75g8Z8qs8PvX7wCNv//jFfZLfZbx4+5qOOsN7/aMxH+/Bjx7+O+cDAYBrzHScbOm4ftj/9oDEfvuzwMR/ydWadcJSBuQcGBqYcNuaj/jtjPul/zf18TJh/6Ocr/X3SczMu/LXhYz7iGP9HYz7qf3LMN7vv7/fzKd+77nMjDYw66sBGy2+wwXrTDv1/+MXphv7P+6LnVhw6zh92LP0go+HLftjjYpR/x2j8f8to0H9kNNkoH2T0j4fWyAcv+vz/6b5olP+s0Xm8Lzpt3qHj9mHfF33QmA9flo6DE79v+RF/Dv2Q18/C2/Te+My/7fCf9/47vH7W8J93/0e+ftbw30muNuJOvv7d+v2/u/zd5e8uf3f5i/uA8/9TDD///+7YB04y7IfOwVfPfNvsH/X2fsT9rz7/P8z3n87/z37bzFcP+dFq2HUfen526Dz/Lc/PzjT0w0SPD59vxPODI27of3R+dt9dN7j6/6fzs/9HDX+s/hs/F7f/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/0wx/HsDDiy/0w2EnQgdvOu3Rm37U2/sR97/6/P8w3386/7/p0dNuOtLA36/70PP/Q+dxnP9/YMHNl/nvfP5/+GO18//1H5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/sw9/HsCRs839heHPB7hxu/33/Ki39yPuf+v5/97/31v7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4Yef/B0Z4m8SFu19gcP7/f3Yf4L9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5Q/ZvH/cf6YxX/J/DGL/1L5Yxb/n+SPWfx/mj9m8V86f8ziv0z+mMV/2fwxi//P8scs/svlj1n8l88fs/j/PH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9F/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/1/mj1n8f5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f549Z/H+TP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/zR+z+G+VP2bx/13+mMV/6/wxi//v88cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/4f8MYv/H/PHLP475I9Z/P+UP2bx/3P+mMV/x/wxi/9O+WMW/7/kj1n8d84fs/jvkj9m8d81f8zi/9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388ck/oMG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/e5/m/69Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6YxX+K/DGL/2fzxyz+n8sfs/h/Pn/M4j9l/pjF/wv5Yxb/L+aPWfy/lD9m8Z8qf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/N/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfxnyx+z+H8nf8zi/938MYv/7PljFv858scs/nPmj1n858ofs/h/L3/M4j93/pjFf578MYv/vPljFv/v549Z/OfLH7P4/yB/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4/zB+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yh+z+P84f8ziv2T+mMV/qfwxi/9P8scs/j/NH7P4L50/ZvFfJn/M4r9s/pjF/2f5Yxb/5fLHLP7L549Z/H+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yJ/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/L/PHLP6/yh+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6/zxyz+v8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjF//f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Q/6Yxf+P+WMW/x3yxyz+f8ofs/j/OX/M4r9j/pjFf6f8MYv/X/LHLP47549Z/HfJH7P475o/ZvH/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/kQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOI/Sf6Yxf/j+WMW/0nzxyz+n8gfs/hPlj9m8f9k/pjF/1P5Yxb/yfPHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzJ/zOL/hfwxi/8X88cs/l/KH7P4T5U/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+b+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/1b+mMV/1vwxi/+388cs/rPlj1n8v5M/ZvH/bv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+XP2bxnzt/zOI/T/6YxX/e/DGL//fzxyz+8+WPWfx/kD9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/x/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/lj1n8f5w/ZvFfMn/M4r9U/pjF/yf5Yxb/n+aPWfyXzh+z+C+TP2bxXzZ/zOL/s/wxi/9y+WMW/+Xzxyz+P88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/kT9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+X+WMW/1/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/1/ljFv/f5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/b/PHLP5b5Y9Z/H+XP2bx3zp/zOL/+/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8hf8zi/8f8MYv/DvljFv8/5Y9Z/P+cP2bx3zF/zOK/U/6Yxf8v+WMW/53zxyz+u+SPWfx3zR+z+P81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif8oA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8Z8kf8zi//H8MYv/pPljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/+fyxyz+n88fs/hPmT9m8f9C/pjF/4v5Yxb/L+WPWfynyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/838MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/K3/M4j9r/pjF/9v5Yxb/2fLHLP7fyR+z+H83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+38sfs/jPnT9m8Z8nf8ziP2/+mMX/+/ljFv/58scs/j/IH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/D/PHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/j/LHLP4/zh+z+C+ZP2bxXyp/zOL/k/wxi/9P88cs/kvnj1n8l8kfs/gvmz9m8f9Z/pjFf7n8MYv/8vljFv+f549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/r/IH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/8v8MYv/r/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v/r/DGL/2/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf+3+WMW/63yxyz+v8sfs/hvnT9m8f99/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8/5A/ZvH/Y/6YxX+H/DGL/5/yxyz+f84fs/jvmD9m8d8pf8zi/5f8MYv/zvljFv9d8scs/rvmj1n8/5o/ZvH/W/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdSB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I82kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv8p8scs/p/NH7P4fy5/zOL/+fwxi/+U+WMW/y/kj1n8v5g/ZvH/Uv6YxX+q/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+38wfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+38scs/rPmj1n8v50/ZvGfLX/M4v+d/DGL/3fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/vfwxi//c+WMW/3nyxyz+8+aPWfy/nz9m8Z8vf8zi/4P8MYv//PljFv8F8scs/gvmj1n8F8ofs/j/MH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/KH/M4v/j/DGL/5L5Yxb/pfLHLP4/yR+z+P80f8ziv3T+mMV/mfwxi/+y+WMW/5/lj1n8l8sfs/gvnz9m8f95/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/4v8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+v8wfs/j/Kn/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/OH7P4/yZ/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+bP2bx3yp/zOL/u/wxi//W+WMW/9/nj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/D/ljFv8/5o9Z/HfIH7P4/yl/zOL/5/wxi/+O+WMW/53yxyz+f8kfs/jvnD9m8d8lf8ziv2v+mMX/r/ljFv+/5Y9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938scs/u/mj0n8Rx/IH7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOI/Wf6Yxf+T+WMW/0/lj1n8J88fs/h/On/M4v+Z/DGL/xT5Yxb/z+aPWfw/lz9m8f98/pjFf8r8MYv/F/LHLP5fzB+z+H8pf8ziP1X+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv9v5o9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+M+WP2bx/07+mMX/u/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9e/pjFf+78MYv/PPljFv9588cs/t/PH7P4z5c/ZvH/Qf6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/H+YP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/H+UP2bx/3H+mMV/yfwxi/9S+WMW/5/kj1n8f5o/ZvFfOn/M4r9M/pjFf9n8MYv/z/LHLP7L5Y9Z/JfPH7P4/zx/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Rf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9f5o9Z/H+VP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/X+ePWfx/kz9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/7/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+H/DGL/x/zxyz+O+SPWfz/lD9m8f9z/pjFf8f8MYv/TvljFv+/5I9Z/HfOH7P475I/ZvHfNX/M4v/X/DGL/9/yxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5Yxb/d/PHJP5jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMV/ivwxi/9n88cs/p/LH7P4fz5/zOI/Zf6Yxf8L+WMW/y/mj1n8v5Q/ZvGfKn/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/zfzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8Z8sfs/h/J3/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fy9/zOI/d/6YxX+e/DGL/7z5Yxb/7+ePWfznyx+z+P8gf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+P8wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/j/OH/M4r9k/pjFf6n8MYv/T/LHLP4/zR+z+C+dP2bxXyZ/zOK/bP6Yxf9n+WMW/+Xyxyz+y+ePWfx/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8if8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/zEH8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/WAP5Yxb/QfljFv+R8scs/iPnj1n8R8kfs/gPzh+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfwnyx+z+H8yf8zi/6n8MYv/5PljFv9P549Z/D+TP2bxnyJ/zOL/2fwxi//n8scs/p/PH7P4T5k/ZvH/Qv6Yxf+L+WMW/y/lj1n8p8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v/N/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/9nyxyz+38kfs/h/N3/M4j97/pjFf478MYv/nPljFv+58scs/t/LH7P4z50/ZvGfJ3/M4j9v/pjF//v5Yxb/+fLHLP4/yB+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/w/zxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/4/yxyz+P84fs/gvmT9m8V8qf8zi/5P8MYv/T/PHLP5L549Z/JfJH7P4L5s/ZvH/Wf6YxX+5/DGL//L5Yxb/n+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6/yB+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v/L/DGL/6/yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/6/wxi/9v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvH/ff6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/P+QP2bx/2P+mMV/h/wxi/+f8scs/n/OH7P475g/ZvHfKX/M4v+X/DGL/875Yxb/XfLHLP675o9Z/P+aP2bx/1v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/zOL/bv6YxH/sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/pPlj1n8P5k/ZvH/VP6YxX/y/DGL/6fzxyz+n8kfs/hPkT9m8f9s/pjF/3P5Yxb/z+ePWfynzB+z+H8hf8zi/8X8MYv/l/LHLP5T5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/2b+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/bPljFv/v5I9Z/L+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+WPWfznzh+z+M+TP2bxnzd/zOL//fwxi/98+WMW/x/kj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/h/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/R/ljFv8f549Z/JfMH7P4L5U/ZvH/Sf6Yxf+n+WMW/6Xzxyz+y+SPWfyXzR+z+P8sf8ziv1z+mMV/+fwxi//P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/1/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/2X+mMX/V/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8f91/pjF/zf5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+P8+f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+f8gfs/j/MX/M4r9D/pjF/0/5Yxb/P+ePWfx3zB+z+O+UP2bx/0v+mMV/5/wxi/8u+WMW/13zxyz+f80fs/j/LX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f0ziP85A/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdyB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I83kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PH/j/26MEADAQAAtjbGuBt27Zt27Zt27Zt27ZtW3UXuAl6yQpp+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/qOW/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T9q+f/bf9Ty/4//qOX/X/9Ry/9//qOW///9Ry3/A/xHLf8D/Uct/4P8Ry3/g/1HLf9D/Ect/0P9Ry3/w/xHJf8TjeQ/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+NcP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCcvbuNzass/Dh+urZ7+rN/N+fwGjIYbLqJK1u7MhlsPtTHgqk6FgMmkC2sjEph7iG4gVoNSgzGMBkJIuo2dRNIjBkvhgkIK4lKnIrGiWiIQ1AXMTVMZETjUnO3vUt7r23Wq17XXuzzedHe55Tf6bbku3PK1gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//r0PLXg==") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900295965b69000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 8.085853548s ago: executing program 3 (id=1255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.015953276s ago: executing program 3 (id=1259): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x29}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000c, &(0x7f00000002c0)=ANY=[@ANYBLOB='nobarrier,decompose,gid=', @ANYRESHEX, @ANYBLOB=',barrier,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d64656661756c742c001bb4a4447bd69aa8532125707aa318f1e60d28086a88ef2208cc30839fc1be7ad88539fad2c027aca664454d7bf988a9fa9f5f0cab42326f5c70febc7902ce02b8ec0adb23bef1c917d0bd"], 0x1, 0x6e3, &(0x7f00000009c0)="$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") 6.153304626s ago: executing program 2 (id=1260): io_uring_setup(0x497c, &(0x7f00000001c0)) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r0, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aeaaaaa6aaaabbbbbbbbbbbb86dd607f00ef000c2c00fe8000000000061700000000000000c25c9fb51bcc4a66a770cd86f52b0000000001f6b70000000c9078010000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="148000001000010000000000000000000000000a20000000000a05000000000000000000110000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000004c000000060a0104000000000000000001000000080020000180080a17673a97dfe226bc92953d8f40f13a000100636d700014"], 0xc0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='map_files\x00') ioctl$BLKTRACESTART(r3, 0x1274, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socket(0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0), &(0x7f0000000400)=0x8) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1}}], 0x1, 0x40000163, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) 6.126416479s ago: executing program 4 (id=1261): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xd5a, 0x0, 0x0, 0x95}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000001c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0xa753, 0xb24, 0xff}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"/512], 0x200) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) ioprio_get$uid(0x0, 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 5.514517918s ago: executing program 3 (id=1264): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000440)='./file1\x00') open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 5.37464743s ago: executing program 4 (id=1265): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xe, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0x1, @vbi={0x4, 0xc83, 0x0, 0x47425247, [0xffffffff, 0x4cc], [0x8, 0x9], 0x1}}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xb) syz_emit_vhci(&(0x7f0000002880)=ANY=[@ANYBLOB="03000096ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8fe7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadd68ab76f1fd272b82f6dd32f35208d7aac762d4e6de9c2bb77d773124352da0840f8f532d0103dc52b6a44b9b8ca3b81ee1a00460f91b43c8e05903f8493d13d35ed53adf8cdeacf33fb"], 0x9a) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES32=r0], 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r3, 0x20, &(0x7f0000000080)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, &(0x7f0000000280)=""/83, 0x53}}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x2, 0x1000, 0x3, 0x1, 0x1d48, 0xffffffffffffffff, 0x5fff, '\x00', 0x0, r4, 0x0, 0x1, 0x4}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000380), 0x0, r5}, 0x38) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) 5.25823262s ago: executing program 1 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x64, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) 5.187772545s ago: executing program 1 (id=1267): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40000000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000a40)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007\x00\x00\x00\x00=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0a5064dcbb983304ffc9721bca5c2842b0e33e7c8c006625f49a6ba33f03f8d4fcc955734bcd3687a7df4485f28b63072ded049625786711908c94c1a74006f641ca41f8b62ecdc9f9972249329142002d3ceb3bbe41e01ce72f492d37cf71422e7a62bb1b6091e4bff8d121d1f1054a6c59ebb28dd304bdd46b547d0ad8adb4806ec122add845b75a5d9d765b0be0a73c25dae34b4a618fb17ae8a02276a5463109add6b846ad9325"], 0xff, 0x14f5, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000002a80)=ANY=[@ANYBLOB="1a1118000000000400000000000000000000611967000000000095000000000000000b2d661db485131903ec80b0980f42de53391d8f45816ed40da19c94f62db51a206ddfe016e8f6495a05e97b6ef19d0825b2d21f87cf84040f4b2420ab5d8cb7533c43ff0e2dee9e7ef5808e13cb34c5affed206d93f36c8ce613d123c298ba15a96797f07806f715f06e56c01a48d1135a8e6f898bcc0e79f5241bc4acbe13f4f5a59"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4040000) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x10000000) getdents(r3, &(0x7f00000002c0)=""/4096, 0x1000) 5.00257465s ago: executing program 2 (id=1268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 4.847610973s ago: executing program 0 (id=1269): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.609566935s ago: executing program 1 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x209, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000a4900000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}], {0x14}}, 0x3c}}, 0x0) 3.555708719s ago: executing program 3 (id=1271): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 3.471492736s ago: executing program 4 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0xb, &(0x7f0000000040), 0x4) 3.285403641s ago: executing program 1 (id=1273): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000567000/0x1000)=nil, 0x1000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x80000c, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) getdents(r3, 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll(&(0x7f0000003940)=[{r5}, {r5}], 0x2, 0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x23, &(0x7f0000000300), &(0x7f0000000100)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x8, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 3.284822602s ago: executing program 3 (id=1274): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x318, 0x1e8, 0x7, 0xfeffffff, 0x140, 0xa8, 0x280, 0x280, 0xffffffff, 0x280, 0x280, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @broadcast, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0100005c6b4408070a64006e00010203010902240001a82200000904000002ca743600090503032000ff00ef080584"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.286707505s ago: executing program 4 (id=1275): syz_emit_ethernet(0x76, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x40, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "800090", 0x0, 0x0, 0x0, @remote, @private1, [@routing={0x2b}], "d4c09ef7326bfe57"}}}}}}}, 0x0) 1.286542475s ago: executing program 2 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@ipmr_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_NH_ID={0xfffffffffffffe2a}]}, 0x30}}, 0x0) 1.286409035s ago: executing program 0 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x64, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) 1.282130445s ago: executing program 1 (id=1278): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fdatasync(r0) 1.23386554s ago: executing program 4 (id=1279): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180300000000000000000000000000001801000020646c250000000000202020db13f8fff1000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa7, &(0x7f0000000500)=""/167}, 0x90) 1.096144541s ago: executing program 0 (id=1280): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.075019932s ago: executing program 2 (id=1281): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*\x00', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 1.063487863s ago: executing program 4 (id=1282): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001140)=""/4096, &(0x7f00000002c0)=0x1000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) syz_open_dev$dri(0x0, 0x0, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000740)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) pwrite64(r1, &(0x7f0000000e80), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)=0x0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = syz_clone(0x52800000, &(0x7f00000005c0)="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", 0xfd, 0x0, &(0x7f0000000440), &(0x7f0000000780)="160fa434119a7f50ebabe2e0b45bb10d90c83e91331748cadc4e521777d8445fca650ed370b8453952cc20ee09e51dd87c0bd6e85f28b3d905c3a7b2684c620cb550aaa9dcc0c91f804ffe7c758836e60bb6424cea1f257cc218c3a62ff5dfdac337d32a0176ac0b68b4420badc17ef93952edd42e586ac4176dc3afb814daa08c5083e4dbc895e5abca9915b9a6a497da7fb65d9133e02d063dd322ec228eb17f639ec24bd0b03226273f0ad19377e72c189010c47d537bf16ecaa1667691d9ed13fd46870f3bd9f6267d9fb4e66fd769bfeb961a9cbb130de1181a3adfd43d223572adf5d5772c4ad4") syz_clone3(&(0x7f0000000880)={0x22208a00, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000240), {0x2a}, &(0x7f0000002140)=""/4096, 0x1000, &(0x7f0000000300)=""/27, &(0x7f0000000480)=[r4, r5, r6], 0x3}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 337.086232ms ago: executing program 2 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14}], {0x14}}, 0x98}}, 0x0) 251.88338ms ago: executing program 1 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000d40)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) 126.91433ms ago: executing program 3 (id=1285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000ddbb59600000000000000000000000000f5ff0000000000000000000000000000feffffff00002000000000000000000000000000000000000200000000dfff0000000000000000180000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000100073397a5f74756e00001000000000000079615330000000000000000000000000b76fb8645f736c61e4df8dd63f4316ed73697430000000002000000000000000aaaaaaaaaa0000000000feff0080c20000000000000000000000e8000000e8000000180100006c696d6974004000000000800000000002000000000000000000000000000000200000000000000000f9ff210000009400000000000000003830"]}, 0x1b2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getdents(r3, &(0x7f0000000340)=""/45, 0x2d) getdents64(r3, &(0x7f0000000000)=""/55, 0x37) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.651768ms ago: executing program 0 (id=1286): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b40)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x6}]}}) 0s ago: executing program 2 (id=1287): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@grpquota}, {@nombcache}, {@user_xattr}, {@nomblk_io_submit}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$eJzs3N9rW2UYAOD3nKZZu3WmExHnjRWRDcSsnXS4IbjJxBsvBL0VVrp0lGY/aCuzXS9S/QdEvRa8EdSheOGud6PorTc6bxUvhCF1VRDRykmTtq5N17lkp3bPA1/O950vyfu+OSTnfJAkgHvWQHaTRuyPiFNJRKmxP42IYr3XE1Fbvt/iwtzo7wtzo0ksLb38SxJJRNxYmBttPlfS2O5pDHoi4pvnkrj/zfVxp2ZmJ0aq1cpkY3xo+uyFQ1Mzs0+Onx05UzlTOTd05Onhw8NHBo8Ot63WP344fuW3R1/4qfbnR39d/vWdD5I4Hn2NubV1tMtADKy8JmsVImKk3cFy0tWoZ22dSeEWD0o7nBQAAC2la67hHoxSdMXqxVspvvg21+QAAACAtljqilgCAAAAdrjE+h8AAAB2uOb3AG4szI02W77fSLi7rp+IiP7l+hcbbXmmELX6tie6I2L3jSTW/qw1WX7YHRuIiB+/P/pp1qJDv0PeTG0+Ih7a6Pgn9fr767/iXl9/GhGDbYg/cNP4/1T/8TbEz7t+AO5NV08sn8jWn//Sleuf2OD8V9jg3PVf5H3+a17/La67/lutv6vF9d9LW4xx6cP3Lraay+p/5srznzRbFj/b3lFRt+H6fMTDhY3qT1bqT1rUf2qLMUp/X6y0msu7/qX3Iw7ExvU3JZv/P9GhsfFqZXD5dsMY818Pf9wqft71Z8d/d4v6m///1Or4X9hijFdPnvys1dzA3sZCtGX96c/F5JV6r9jY8/rI9PTkUEQxeXH9/sOb59K8T/M5svoPPrb5+3+j+rPPhFrjdcjWAvONbTZ+46aYz16+9HmLdOr/hJSt/fI8/qdbHP+19X9VWH/839pijMe/fPtgq7m169+sZfGba2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaEojoi+StLzST9NyOWJPRDwQu9Pq+anpJ8bOv3budDYX0R/d6dh4tTIYEaXlcZKNh+r91fHhm8ZPRcS+iHi31Fsfl0fPV0/nXTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr9kREXyRpOSLSiFgspWm5nHdWAAAAQNv1550AAAAA0HHW/wAAALDzWf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYfseuXotiYjasd56yxQbc925ZgZ0Wpp3AkBuuvJOAMhNIe8EgNzc5hrf5QLsQMkt5ntazuxqey4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbF8H9l+9lkRE7VhvvWWKjbnuXDMDOi3NOwEgN12bTRbuXh7A3ectDvcua3wgucV8z+p9av+e2dWxnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrqLUnLEVFs7CuXI/ZGRH90J2Pj1cpgRNwXEd+Vundl46GccwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD9pmZmJ0aq1cpk1kmj0VnZo7MtOpFEbIM0dlinGDlG743t8SK07OT9yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB6mZmYnRqrVyuRU3pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuamZ0YqVYrkx3s5F0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5+ScAAP//u5IOww==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): 3673, free_space(entry_count) 2 [ 169.826889][ T3808] hid (null): report_id 0 is invalid [ 169.852526][ T5555] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 169.855701][ T3808] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 169.871461][ T3808] hid-generic 0003:0158:0100.0001: collection stack underflow [ 169.885205][ T3808] hid-generic 0003:0158:0100.0001: item 0 2 0 12 parsing failed [ 169.897139][ T3808] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 169.912522][ T5555] REISERFS (device loop2): Remounting filesystem read-only [ 169.960977][ T5555] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 170.070434][ T3960] usb 1-1: USB disconnect, device number 4 [ 170.528434][ T5582] loop3: detected capacity change from 0 to 2048 [ 170.576896][ T5585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.653056][ T5568] loop1: detected capacity change from 0 to 32768 [ 170.670359][ T5568] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.548 (5568) [ 170.787756][ T5568] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 170.819178][ T5568] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 170.851923][ T5568] BTRFS info (device loop1): using free space tree [ 171.057955][ T5608] loop0: detected capacity change from 0 to 2048 [ 171.068730][ T5608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.079003][ T5568] BTRFS info (device loop1): enabling ssd optimizations [ 171.798890][ T3550] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 172.390833][ T5627] loop0: detected capacity change from 0 to 2048 [ 172.489036][ T5632] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.872273][ T4449] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 172.939930][ T5646] binder: 5635:5646 ioctl 400c620e 20000380 returned -22 [ 173.142699][ T4449] usb 4-1: Using ep0 maxpacket: 16 [ 173.272903][ T4449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 173.328785][ T4449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 173.379219][ T4449] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 173.454516][ T4449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.469478][ T4449] usb 4-1: config 0 descriptor?? [ 173.821593][ T5659] loop0: detected capacity change from 0 to 256 [ 173.935718][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.954903][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.995318][ T4449] hid (null): report_id 0 is invalid [ 174.010591][ T4449] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 174.057030][ T4449] hid-generic 0003:0158:0100.0002: collection stack underflow [ 174.078236][ T4449] hid-generic 0003:0158:0100.0002: item 0 2 0 12 parsing failed [ 174.102528][ T5667] loop4: detected capacity change from 0 to 128 [ 174.103885][ T4449] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 174.143002][ T5667] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.186667][ T5667] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 174.305365][ T4449] usb 4-1: USB disconnect, device number 4 [ 174.366155][ T5671] loop1: detected capacity change from 0 to 4096 [ 174.444907][ T5671] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 174.647755][ T3562] EXT4-fs (loop4): unmounting filesystem. [ 174.890174][ T5653] loop2: detected capacity change from 0 to 40427 [ 174.928695][ T5653] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 174.975322][ T5653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 175.020914][ T5653] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.045876][ T5680] loop1: detected capacity change from 0 to 8192 [ 175.081644][ T5653] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 175.088983][ T5653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 175.109474][ T5680] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.154827][ T5680] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 175.172385][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.193971][ T5680] REISERFS (device loop1): using ordered data mode [ 175.231715][ T5680] reiserfs: using flush barriers [ 175.258797][ T5680] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.284753][ T5680] REISERFS (device loop1): checking transaction log (loop1) [ 175.313227][ T5680] REISERFS (device loop1): Using r5 hash to sort names [ 175.328021][ T5680] REISERFS (device loop1): using 3.5.x disk format [ 175.335485][ T5680] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 175.415058][ T5680] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3673, free_space(entry_count) 2 [ 175.432308][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 175.472243][ T5680] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 175.502319][ T5680] REISERFS (device loop1): Remounting filesystem read-only [ 175.514602][ T5680] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 175.553698][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 175.597675][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 175.782704][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=a0.85 [ 175.810482][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.822732][ T26] usb 5-1: Product: syz [ 175.826990][ T26] usb 5-1: Manufacturer: syz [ 175.842205][ T26] usb 5-1: SerialNumber: syz [ 175.856419][ T26] usb 5-1: config 0 descriptor?? [ 175.904139][ T26] usbtest 5-1:0.0: Linux gadget zero [ 175.909488][ T26] usbtest 5-1:0.0: high-speed {control in/out iso-out} tests (+alt) [ 175.979381][ T3559] syz-executor: attempt to access beyond end of device [ 175.979381][ T3559] loop2: rw=2051, sector=57344, nr_sectors = 20480 limit=40427 [ 176.015115][ T3559] syz-executor: attempt to access beyond end of device [ 176.015115][ T3559] loop2: rw=2051, sector=81920, nr_sectors = 8192 limit=40427 [ 176.037249][ T3559] F2FS-fs (loop2): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 176.037299][ T3559] F2FS-fs (loop2): Issue discard(10240, 10240, 1024) failed, ret: -5 [ 176.074771][ T5705] loop1: detected capacity change from 0 to 256 [ 176.137236][ T4449] usb 5-1: USB disconnect, device number 5 [ 176.644109][ T5709] loop1: detected capacity change from 0 to 4096 [ 176.701082][ T5709] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 176.869311][ T5713] loop3: detected capacity change from 0 to 4096 [ 177.209824][ T5713] overlayfs: upper fs does not support tmpfile. [ 177.237607][ T5713] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 177.261177][ T5723] loop1: detected capacity change from 0 to 8192 [ 177.300314][ T5723] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.314112][ T5723] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 177.325209][ T5723] REISERFS (device loop1): using ordered data mode [ 177.331764][ T5723] reiserfs: using flush barriers [ 177.352235][ T5723] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.398899][ T5723] REISERFS (device loop1): checking transaction log (loop1) [ 177.399771][ T4990] ntfs3: loop3: failed to convert "0080" to macturkish [ 177.424195][ T5723] REISERFS (device loop1): Using r5 hash to sort names [ 177.432299][ T4990] ntfs3: loop3: failed to convert name for inode 1e. [ 177.447540][ T5723] REISERFS (device loop1): using 3.5.x disk format [ 177.538841][ T5723] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 177.735097][ T5741] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3673, free_space(entry_count) 2 [ 177.812404][ T5741] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 177.836671][ T5741] REISERFS (device loop1): Remounting filesystem read-only [ 177.854018][ T5741] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 177.930310][ T5723] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 145, free_space(entry_count) 2 [ 177.983305][ T5723] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 178.028256][ T5723] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 178.153919][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.381775][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.519228][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.641071][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.665807][ T5726] loop0: detected capacity change from 0 to 40427 [ 178.695301][ T5726] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 178.778545][ T5726] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 179.051754][ T5726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.169276][ T3558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.187555][ T3558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.196384][ T3558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.213660][ T3558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.227376][ T3558] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.235022][ T3558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.428826][ T5726] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 179.462381][ T5726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 179.938650][ T5780] xt_bpf: check failed: parse error [ 180.532857][ T5776] loop1: detected capacity change from 0 to 2048 [ 180.544342][ T5776] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.644621][ T5784] loop2: detected capacity change from 0 to 512 [ 180.799766][ T5784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.252365][ T3567] Bluetooth: hci1: command tx timeout [ 181.281550][ T5784] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038 (0x7fffffff) [ 181.824621][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 181.871359][ T5795] bridge0: port 3(syz_tun) entered blocking state [ 182.042952][ T5795] bridge0: port 3(syz_tun) entered disabled state [ 182.110871][ T5795] device syz_tun entered promiscuous mode [ 182.127276][ T5795] bridge0: port 3(syz_tun) entered blocking state [ 182.127774][ T5804] loop4: detected capacity change from 0 to 164 [ 182.135476][ T5795] bridge0: port 3(syz_tun) entered forwarding state [ 182.554823][ T5820] loop1: detected capacity change from 0 to 64 [ 182.661151][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 183.310217][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.332246][ T3567] Bluetooth: hci1: command tx timeout [ 183.351387][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.407404][ T5763] device bridge_slave_0 entered promiscuous mode [ 183.566675][ T5834] loop1: detected capacity change from 0 to 512 [ 183.591322][ T5816] loop2: detected capacity change from 0 to 32768 [ 183.610545][ T5834] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 183.630257][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.656529][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.745642][ T5834] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 183.781063][ T5763] device bridge_slave_1 entered promiscuous mode [ 183.809143][ T5834] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz.1.629: Invalid inode table block 0 in block_group 0 [ 183.824721][ T5816] XFS (loop2): device supports 512 byte sectors (not 0) [ 183.935359][ T5834] EXT4-fs (loop1): get root inode failed [ 183.941142][ T5834] EXT4-fs (loop1): mount failed [ 184.117103][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.171791][ T5834] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 184.212252][ T5834] EXT4-fs (loop1): unable to read superblock [ 184.230750][ T9] device hsr_slave_0 left promiscuous mode [ 184.282348][ T9] device hsr_slave_1 left promiscuous mode [ 184.294946][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.322223][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.353108][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.361367][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.422945][ T9] device bridge_slave_1 left promiscuous mode [ 184.429250][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.468544][ T9] device bridge_slave_0 left promiscuous mode [ 184.512343][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.617964][ T9] device veth1_macvtap left promiscuous mode [ 184.662318][ T9] device veth0_macvtap left promiscuous mode [ 184.693276][ T9] device veth1_vlan left promiscuous mode [ 184.722298][ T9] device veth0_vlan left promiscuous mode [ 185.412368][ T3567] Bluetooth: hci1: command tx timeout [ 185.639340][ T5870] loop1: detected capacity change from 0 to 64 [ 185.972287][ T3567] Bluetooth: hci0: command 0x0406 tx timeout [ 185.972357][ T3561] Bluetooth: hci2: command 0x0406 tx timeout [ 185.978448][ T3567] Bluetooth: hci4: command 0x0406 tx timeout [ 185.985837][ T3561] Bluetooth: hci3: command 0x0406 tx timeout [ 186.081482][ T5878] loop1: detected capacity change from 0 to 512 [ 186.164706][ T5878] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 186.219643][ T5878] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 186.252849][ T5878] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz.1.639: Invalid inode table block 0 in block_group 0 [ 186.294854][ T5878] EXT4-fs (loop1): get root inode failed [ 186.300550][ T5878] EXT4-fs (loop1): mount failed [ 186.462825][ T5878] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 186.489570][ T5878] EXT4-fs (loop1): unable to read superblock [ 186.804353][ T52] block nbd1: Attempted send on invalid socket [ 186.810930][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 186.839834][ T5891] hpfs: hpfs_map_sector(): read error [ 187.105321][ T5896] syz.1.645 uses obsolete (PF_INET,SOCK_PACKET) [ 187.123107][ T9] team0 (unregistering): Port device team_slave_1 removed [ 187.186765][ T5880] loop2: detected capacity change from 0 to 32768 [ 187.273554][ T9] team0 (unregistering): Port device team_slave_0 removed [ 187.310493][ T5880] XFS (loop2): device supports 512 byte sectors (not 0) [ 187.492321][ T3567] Bluetooth: hci1: command tx timeout [ 187.560251][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.763518][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.957698][ T3567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.999113][ T3567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.018877][ T3567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.027681][ T3567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.035589][ T3567] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.044012][ T3567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.629786][ T3805] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.736288][ T9] bond0 (unregistering): Released all slaves [ 188.825305][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.899196][ T3805] usb 3-1: Using ep0 maxpacket: 32 [ 189.033063][ T3805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.046987][ T5763] team0: Port device team_slave_0 added [ 189.090196][ T3805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.125378][ T5763] team0: Port device team_slave_1 added [ 189.126040][ T5921] loop1: detected capacity change from 0 to 512 [ 189.184915][ T5921] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 189.201772][ T5921] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 189.233712][ T5921] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz.1.652: Invalid inode table block 0 in block_group 0 [ 189.268215][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.299562][ T5921] EXT4-fs (loop1): get root inode failed [ 189.305897][ T3805] usb 3-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19 [ 189.332426][ T5921] EXT4-fs (loop1): mount failed [ 189.339078][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.348797][ T3805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.373475][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.418939][ T3805] usb 3-1: Product: syz [ 189.423416][ T3805] usb 3-1: Manufacturer: syz [ 189.428043][ T3805] usb 3-1: SerialNumber: syz [ 189.450792][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.467473][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.468522][ T3805] usb 3-1: config 0 descriptor?? [ 189.531648][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.601385][ T3805] rndis_wlan 3-1:0.0: skipping garbage [ 189.640383][ T3805] usb 3-1: bad CDC descriptors [ 189.646202][ T5921] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 189.655898][ T5921] EXT4-fs (loop1): unable to read superblock [ 189.726719][ T3805] rndis_host 3-1:0.0: skipping garbage [ 189.762883][ T3805] usb 3-1: bad CDC descriptors [ 189.768126][ T3805] cdc_acm 3-1:0.0: skipping garbage [ 189.812238][ T3805] usb 3-1: USB disconnect, device number 6 [ 189.950337][ T5763] device hsr_slave_0 entered promiscuous mode [ 189.970813][ T5763] device hsr_slave_1 entered promiscuous mode [ 190.022873][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.100883][ T5763] Cannot create hsr debugfs directory [ 190.132283][ T3567] Bluetooth: hci5: command tx timeout [ 190.479653][ T5908] chnl_net:caif_netlink_parms(): no params data found [ 190.522253][ T3805] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 190.757044][ T5962] loop2: detected capacity change from 0 to 512 [ 190.802270][ T3805] usb 2-1: Using ep0 maxpacket: 8 [ 190.870635][ T5962] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.917935][ T5962] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038 (0x7fffffff) [ 190.952638][ T3805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 190.975747][ T3805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 191.107043][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 191.187448][ T3805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=a0.85 [ 191.208925][ T3805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.249061][ T3805] usb 2-1: Product: syz [ 191.253648][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.269315][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.282306][ T3805] usb 2-1: Manufacturer: syz [ 191.300539][ T3805] usb 2-1: SerialNumber: syz [ 191.306759][ T5908] device bridge_slave_0 entered promiscuous mode [ 191.335762][ T3805] usb 2-1: config 0 descriptor?? [ 191.407523][ T3805] usbtest 2-1:0.0: Linux gadget zero [ 191.414569][ T3805] usbtest 2-1:0.0: high-speed {control in/out iso-out} tests (+alt) [ 191.477983][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.489850][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.521808][ T5908] device bridge_slave_1 entered promiscuous mode [ 191.639521][ T26] usb 2-1: USB disconnect, device number 6 [ 191.841915][ T5981] loop4: detected capacity change from 0 to 128 [ 191.864900][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.900389][ T5981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.924589][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.943185][ T5981] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 192.111403][ T5908] team0: Port device team_slave_0 added [ 192.184555][ T5908] team0: Port device team_slave_1 added [ 192.212617][ T3567] Bluetooth: hci5: command tx timeout [ 192.262559][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.272299][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.351911][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.397857][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.418920][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.460587][ T3805] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.492188][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.536436][ T5763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 192.606470][ T5763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 192.672431][ T3805] usb 5-1: device descriptor read/64, error -71 [ 192.696619][ T5763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 192.823817][ T6000] loop2: detected capacity change from 0 to 256 [ 192.880423][ T5763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.982451][ T5908] device hsr_slave_0 entered promiscuous mode [ 193.009711][ T5908] device hsr_slave_1 entered promiscuous mode [ 193.099289][ T5908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.144405][ T6000] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 193.297146][ T6000] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 193.297146][ T6000] [ 193.309651][ T6000] exFAT-fs (loop2): Filesystem has been set read-only [ 193.316553][ T6000] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d9907e0 iblock : 0, err : -5) [ 193.351160][ T6000] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 193.351160][ T6000] [ 193.363584][ T6000] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d990e60 iblock : 0, err : -5) [ 193.663758][ T27] audit: type=1800 audit(1720532691.119:73): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.672" name="bus" dev="loop2" ino=1048662 res=0 errno=0 [ 193.702180][ T5908] Cannot create hsr debugfs directory [ 193.737270][ T6002] loop1: detected capacity change from 0 to 128 [ 193.795632][ T6002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 193.830848][ T6002] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 193.873680][ T3805] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.072472][ T3805] usb 5-1: device descriptor read/64, error -71 [ 194.138949][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.145379][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.195094][ T3805] usb usb5-port1: attempt power cycle [ 194.246848][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 194.262786][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.292532][ T3567] Bluetooth: hci5: command tx timeout [ 194.368355][ T6013] loop2: detected capacity change from 0 to 128 [ 194.633814][ T3805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.655546][ T5908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.362271][ T3805] usb 5-1: device descriptor read/8, error -71 [ 195.454425][ T3562] EXT4-fs (loop4): unmounting filesystem. [ 195.460798][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.553956][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.587824][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.754761][ T5908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.803314][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.819776][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.846910][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.855623][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.942195][ T3805] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.024399][ T5908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.062364][ T3805] usb 5-1: Using ep0 maxpacket: 8 [ 196.075053][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.101416][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.135178][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.173307][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.180481][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.192486][ T3805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 196.223715][ T3805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 196.334620][ T5908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.361931][ T6015] loop1: detected capacity change from 0 to 32768 [ 196.373662][ T3567] Bluetooth: hci5: command tx timeout [ 196.379689][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.403805][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.422336][ T3805] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=a0.85 [ 196.459425][ T5763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.481280][ T3805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.510283][ T3805] usb 5-1: Product: syz [ 196.515560][ T5763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.533178][ T3805] usb 5-1: Manufacturer: syz [ 196.538039][ T3805] usb 5-1: SerialNumber: syz [ 196.555443][ T6015] XFS (loop1): device supports 512 byte sectors (not 0) [ 196.585252][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.595234][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.600751][ T3805] usb 5-1: config 0 descriptor?? [ 196.604288][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.617691][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.626583][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.635430][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.644291][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.663158][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.706125][ T3805] usbtest 5-1:0.0: Linux gadget zero [ 196.708609][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.724460][ T3805] usbtest 5-1:0.0: high-speed {control in/out iso-out} tests (+alt) [ 196.743162][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.974615][ T3643] usb 5-1: USB disconnect, device number 9 [ 197.090708][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.137577][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.175918][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.213790][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.402733][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.412751][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.420280][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.520337][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.540958][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.962912][ T6063] xt_bpf: check failed: parse error [ 198.152702][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.242274][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.627811][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.686750][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.690744][ T6069] loop1: detected capacity change from 0 to 64 [ 198.742849][ T5763] device veth0_vlan entered promiscuous mode [ 198.772198][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.852928][ T5763] device veth1_vlan entered promiscuous mode [ 198.933073][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.940214][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.958552][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.023769][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.041286][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.091381][ T6079] loop1: detected capacity change from 0 to 64 [ 199.096479][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.104762][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.166323][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.257355][ T6084] loop2: detected capacity change from 0 to 256 [ 199.304026][ T6084] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 199.385622][ T6084] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 199.385622][ T6084] [ 199.398044][ T6084] exFAT-fs (loop2): Filesystem has been set read-only [ 199.405080][ T6084] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d991b60 iblock : 0, err : -5) [ 199.434337][ T6084] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 199.434337][ T6084] [ 199.446575][ T6084] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d9921e0 iblock : 0, err : -5) [ 199.470674][ T27] audit: type=1800 audit(1720532697.239:74): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.688" name="bus" dev="loop2" ino=1048664 res=0 errno=0 [ 200.176964][ T6089] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 200.185976][ T6089] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.583832][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.592417][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.599535][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.607368][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.628982][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.637229][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.720721][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.791837][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.823011][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.844897][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.936757][ T5763] device veth0_macvtap entered promiscuous mode [ 200.960358][ T5908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.976507][ T5908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.991638][ T5763] device veth1_macvtap entered promiscuous mode [ 201.003465][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.042809][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.070108][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.108710][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.149689][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.193329][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.222428][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.236437][ T6100] loop4: detected capacity change from 0 to 16 [ 201.258156][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.301185][ T6100] erofs: (device loop4): mounted with root inode @ nid 36. [ 201.308786][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.357486][ T6100] syz.4.692: attempt to access beyond end of device [ 201.357486][ T6100] loop4: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 201.371592][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.371610][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.371628][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.371640][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.371655][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.371668][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.371683][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.409573][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.555310][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.572986][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.581774][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.600269][ T6100] syz.4.692: attempt to access beyond end of device [ 201.600269][ T6100] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 201.677236][ T6100] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 201.698923][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.716562][ T6110] loop1: detected capacity change from 0 to 64 [ 201.732343][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.770831][ T6100] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 201.780739][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.864439][ T6113] syz.4.692: attempt to access beyond end of device [ 201.864439][ T6113] loop4: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 201.871293][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.933491][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.942240][ T6113] syz.4.692: attempt to access beyond end of device [ 201.942240][ T6113] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 201.966632][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.992387][ T6113] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 202.006737][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.020221][ T6113] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 202.034499][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.051023][ T6106] syz.4.692: attempt to access beyond end of device [ 202.051023][ T6106] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 202.094295][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.106060][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.143410][ T6109] syz.4.692: attempt to access beyond end of device [ 202.143410][ T6109] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 202.157993][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.218061][ T5763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.252348][ T5763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.261237][ T5763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.333769][ T5763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.567929][ T6124] loop4: detected capacity change from 0 to 128 [ 202.632817][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.634590][ T5120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.640404][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.688644][ T5120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.726344][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.636515][ T6129] process 'syz.1.697' launched './file0' with NULL argv: empty string added [ 203.683550][ T6095] loop2: detected capacity change from 0 to 32768 [ 203.826385][ T6095] XFS (loop2): device supports 512 byte sectors (not 0) [ 203.837636][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.848255][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.857308][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.867473][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.876153][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.888541][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.896781][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.958154][ T6140] loop4: detected capacity change from 0 to 512 [ 203.966770][ T5908] device veth0_vlan entered promiscuous mode [ 203.999683][ T5908] device veth1_vlan entered promiscuous mode [ 204.033168][ T6140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.062543][ T6140] ext4 filesystem being mounted at /150/bus supports timestamps until 2038 (0x7fffffff) [ 204.074437][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.076876][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.091573][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.097966][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.132766][ T5908] device veth0_macvtap entered promiscuous mode [ 204.163170][ T3562] EXT4-fs (loop4): unmounting filesystem. [ 204.196500][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.213202][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.237537][ T5908] device veth1_macvtap entered promiscuous mode [ 204.357625][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.458458][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.512484][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.545058][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.626804][ T6159] trusted_key: encrypted_key: key user:syz not found [ 204.735198][ T6162] loop3: detected capacity change from 0 to 1024 [ 204.781806][ T6162] hfsplus: extend alloc file! (8192,65536,366) [ 205.064897][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.065122][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.065303][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.065459][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.065835][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.066174][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.104942][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.224981][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.225007][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.225902][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.225920][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.225931][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.225946][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.226904][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.226921][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.226941][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.227952][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.274014][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.358817][ T5908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.359416][ T5908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.359705][ T5908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.359986][ T5908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.514218][ T3820] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.517925][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.518580][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.519176][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.519780][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.520338][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.772024][ T5120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.772188][ T5120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.810228][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.889223][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.889305][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.938435][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.677740][ T6197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.497353][ T6155] tty tty22: ldisc open failed (-12), clearing slot 21 [ 208.514663][ T6160] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 208.628594][ T6207] loop2: detected capacity change from 0 to 64 [ 208.884499][ T6213] loop4: detected capacity change from 0 to 1024 [ 209.164449][ T6225] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 209.173444][ T6225] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 209.725844][ T6215] loop1: detected capacity change from 0 to 4096 [ 209.881113][ T6229] loop3: detected capacity change from 0 to 2048 [ 209.925427][ T6215] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 209.988054][ T6215] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 210.026151][ T6229] hpfs: filesystem error: improperly stopped; already mounted read-only [ 210.062280][ T6229] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 210.109637][ T6229] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 211.783863][ T6258] loop4: detected capacity change from 0 to 512 [ 211.809190][ T6263] loop2: detected capacity change from 0 to 64 [ 212.043267][ T6258] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.728: inline data xattr refers to an external xattr inode [ 212.097376][ T6258] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.728: couldn't read orphan inode 12 (err -117) [ 212.203333][ T6275] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 212.213294][ T6275] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 212.231506][ T6258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 212.831142][ T3562] EXT4-fs (loop4): unmounting filesystem. [ 212.904934][ T6277] loop3: detected capacity change from 0 to 64 [ 213.051118][ T6279] loop2: detected capacity change from 0 to 512 [ 213.061755][ T6279] ext4: Unknown parameter 'appraise' [ 213.168958][ T6286] loop4: detected capacity change from 0 to 256 [ 213.208077][ T6286] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 213.296206][ T6286] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 213.296206][ T6286] [ 213.308356][ T6286] exFAT-fs (loop4): Filesystem has been set read-only [ 213.315399][ T6286] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805d992ee0 iblock : 0, err : -5) [ 213.335911][ T6286] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 213.335911][ T6286] [ 213.348657][ T6286] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805d993560 iblock : 0, err : -5) [ 213.395356][ T27] audit: type=1800 audit(1720532711.159:75): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.734" name="bus" dev="loop4" ino=1048672 res=0 errno=0 [ 215.731209][ T6307] loop2: detected capacity change from 0 to 2048 [ 215.769549][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 215.786197][ T6307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.471859][ T6301] loop3: detected capacity change from 0 to 2048 [ 216.655213][ T6316] loop1: detected capacity change from 0 to 256 [ 216.748261][ T6301] hpfs: filesystem error: improperly stopped; already mounted read-only [ 216.778396][ T6322] loop4: detected capacity change from 0 to 64 [ 216.784359][ T6316] kAFS: No cell specified [ 216.802519][ T6301] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 216.810290][ T6301] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 217.246016][ T6328] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 217.255038][ T6328] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 218.271565][ T6345] [U] ^ [ 220.066298][ T6373] loop2: detected capacity change from 0 to 2048 [ 220.106126][ T6373] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 220.126219][ T6373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.090585][ T6388] [U] ^ [ 221.113443][ T6384] loop1: detected capacity change from 0 to 4096 [ 221.122509][ T3019] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.156851][ T6384] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 221.289676][ T6384] ntfs3: loop1: ino=1f, "pids.current" ntfs_iget5 [ 221.359635][ T3550] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 221.375931][ T3550] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 221.390423][ T3550] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 221.507461][ T3019] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 221.520322][ T3019] usb 3-1: config 0 has no interface number 0 [ 221.546154][ T3019] usb 3-1: New USB device found, idVendor=04ca, idProduct=3007, bcdDevice=6d.d4 [ 221.560360][ T3019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.572725][ T3019] usb 3-1: config 0 descriptor?? [ 221.880355][ T3597] usb 3-1: USB disconnect, device number 7 [ 222.092931][ T6406] loop4: detected capacity change from 0 to 2048 [ 222.139034][ T6406] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 222.159842][ T6406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.213331][ T6415] loop3: detected capacity change from 0 to 2048 [ 223.249387][ T6421] loop4: detected capacity change from 0 to 128 [ 223.260649][ T6415] hpfs: filesystem error: improperly stopped; already mounted read-only [ 223.261221][ T6422] [U] ^ [ 223.291926][ T6415] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.403795][ T6415] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001 [ 224.271089][ T6433] loop2: detected capacity change from 0 to 256 [ 224.497267][ T6433] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 224.564707][ T6433] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 224.564707][ T6433] [ 224.576887][ T6433] exFAT-fs (loop2): Filesystem has been set read-only [ 224.583802][ T6433] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d991b60 iblock : 0, err : -5) [ 224.605823][ T6433] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 224.605823][ T6433] [ 224.618043][ T6433] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d9914e0 iblock : 0, err : -5) [ 224.642297][ T27] audit: type=1800 audit(1720532722.429:76): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.787" name="bus" dev="loop2" ino=1048675 res=0 errno=0 [ 227.679298][ T6474] loop4: detected capacity change from 0 to 512 [ 227.805194][ T6474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.834650][ T6474] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038 (0x7fffffff) [ 228.012581][ T3562] EXT4-fs (loop4): unmounting filesystem. [ 228.041418][ T6484] netlink: 'syz.3.806': attribute type 27 has an invalid length. [ 228.840525][ T6501] loop4: detected capacity change from 0 to 512 [ 228.899914][ T6501] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.815: Invalid inode bitmap blk 4 in block_group 0 [ 228.988149][ T6501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.231757][ T3562] EXT4-fs (loop4): unmounting filesystem. [ 230.500112][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.509354][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.581103][ T6505] loop1: detected capacity change from 0 to 32768 [ 230.588509][ T6505] XFS (loop1): invalid logbufs value: 1 [not 2-8] [ 230.670676][ T3820] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.545106][ T6517] loop2: detected capacity change from 0 to 32768 [ 231.610261][ T6517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.820 (6517) [ 231.750706][ T6517] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.785828][ T6517] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 231.827625][ T6517] BTRFS info (device loop2): using free space tree [ 232.110823][ T6517] BTRFS info (device loop2): enabling ssd optimizations [ 232.396791][ T3559] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.528580][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.806807][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.284547][ T6581] loop2: detected capacity change from 0 to 256 [ 233.404921][ T6581] kAFS: No cell specified [ 233.875979][ T6484] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.891601][ T6484] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.929788][ T6484] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.954621][ T6484] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.304560][ T6579] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 234.579362][ T6596] loop2: detected capacity change from 0 to 256 [ 234.617337][ T6596] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 234.684400][ T6596] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 234.684400][ T6596] [ 234.696759][ T6596] exFAT-fs (loop2): Filesystem has been set read-only [ 234.703946][ T6596] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d994260 iblock : 0, err : -5) [ 234.724725][ T6596] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 234.724725][ T6596] [ 234.736866][ T6596] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805d9948e0 iblock : 0, err : -5) [ 234.771282][ T27] audit: type=1800 audit(1720532732.549:77): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.838" name="bus" dev="loop2" ino=1048678 res=0 errno=0 [ 235.965423][ T27] audit: type=1326 audit(1720532733.839:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.060379][ T27] audit: type=1326 audit(1720532733.839:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.132252][ T27] audit: type=1326 audit(1720532733.879:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.180492][ T27] audit: type=1326 audit(1720532733.879:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.237941][ T27] audit: type=1326 audit(1720532733.879:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.350178][ T27] audit: type=1326 audit(1720532733.879:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.418900][ T6622] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 236.442268][ T27] audit: type=1326 audit(1720532733.929:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.517517][ T6624] loop3: detected capacity change from 0 to 512 [ 236.530833][ T27] audit: type=1326 audit(1720532733.929:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f575bd9 code=0x7ffc0000 [ 236.564333][ T6626] netlink: 'syz.4.851': attribute type 27 has an invalid length. [ 236.624036][ T6624] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.853: casefold flag without casefold feature [ 236.646068][ T27] audit: type=1326 audit(1720532733.929:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.4.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f919f5a7bc5 code=0x7ffc0000 [ 236.692703][ T6624] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.853: missing EA_INODE flag [ 236.862627][ T6624] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.853: error while reading EA inode 2 err=-117 [ 236.943852][ T6624] EXT4-fs (loop3): 1 orphan inode deleted [ 236.963485][ T6624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 237.530065][ T6637] loop1: detected capacity change from 0 to 512 [ 237.595020][ T6639] loop2: detected capacity change from 0 to 64 [ 237.681128][ T6637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 237.732367][ T6637] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038 (0x7fffffff) [ 237.953057][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 238.512954][ T6626] bridge0: port 3(syz_tun) entered disabled state [ 238.643012][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.652246][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.933341][ T5763] EXT4-fs (loop3): unmounting filesystem. [ 239.359576][ T6653] loop1: detected capacity change from 0 to 32768 [ 239.399867][ T6653] XFS (loop1): invalid logbufs value: 1 [not 2-8] [ 239.602264][ T3599] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.852356][ T3599] usb 4-1: Using ep0 maxpacket: 8 [ 240.025624][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.033407][ T3599] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 240.068711][ T3599] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 240.099068][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.343228][ T6671] loop1: detected capacity change from 0 to 2048 [ 240.387979][ T6671] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 240.405907][ T6671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.074949][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.104512][ T6674] loop2: detected capacity change from 0 to 64 [ 242.215017][ T3567] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 242.224600][ T3567] Bluetooth: hci5: Injecting HCI hardware error event [ 242.234614][ T3561] Bluetooth: hci5: hardware error 0x00 [ 242.262680][ T6626] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.282840][ T6626] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.292786][ T6626] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.333282][ T6626] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.541137][ T6691] loop1: detected capacity change from 0 to 64 [ 242.801616][ T6656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.962430][ T3599] usb 4-1: string descriptor 0 read error: -71 [ 242.969915][ T3599] hub 4-1:32.0: USB hub found [ 243.032416][ T3599] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 243.183282][ T3599] usb 4-1: USB disconnect, device number 5 [ 243.235934][ T3820] udevd[3820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.342667][ T3643] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 243.408997][ T6713] loop3: detected capacity change from 0 to 256 [ 243.612506][ T3643] usb 5-1: Using ep0 maxpacket: 32 [ 243.762411][ T3643] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 243.805896][ T6713] kAFS: No cell specified [ 243.859090][ T6715] loop1: detected capacity change from 0 to 512 [ 243.952859][ T3643] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 243.976324][ T3643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.000886][ T6715] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.884: casefold flag without casefold feature [ 244.010689][ T3643] usb 5-1: Product: syz [ 244.020807][ T3643] usb 5-1: Manufacturer: syz [ 244.030773][ T6715] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.884: missing EA_INODE flag [ 244.041408][ T3643] usb 5-1: SerialNumber: syz [ 244.091040][ T3643] usb 5-1: config 0 descriptor?? [ 244.096362][ T6715] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.884: error while reading EA inode 2 err=-117 [ 244.109206][ T6715] EXT4-fs (loop1): 1 orphan inode deleted [ 244.115081][ T6715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 244.144533][ T6708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 244.173173][ T3643] hub 5-1:0.0: bad descriptor, ignoring hub [ 244.179179][ T3643] hub: probe of 5-1:0.0 failed with error -5 [ 244.208132][ T3643] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 244.404129][ T3643] usb 5-1: USB disconnect, device number 10 [ 244.412198][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 244.452408][ T3561] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 244.911052][ T6730] loop3: detected capacity change from 0 to 64 [ 246.127994][ T6739] netlink: 'syz.4.889': attribute type 27 has an invalid length. [ 246.199436][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 246.562466][ T3600] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.952632][ T3600] usb 3-1: Using ep0 maxpacket: 8 [ 247.103100][ T3600] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 247.179347][ T3600] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 247.225046][ T3600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.379662][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 248.462524][ T3643] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.114109][ T3600] usb 3-1: string descriptor 0 read error: -71 [ 249.126542][ T6770] kAFS: No cell specified [ 249.135039][ T3600] hub 3-1:32.0: USB hub found [ 249.213342][ T3600] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 249.312220][ T3643] usb 5-1: Using ep0 maxpacket: 32 [ 249.333129][ T3600] usb 3-1: USB disconnect, device number 8 [ 249.391778][ T6780] loop1: detected capacity change from 0 to 512 [ 249.439665][ T6780] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.905: casefold flag without casefold feature [ 249.462432][ T3643] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 249.593876][ T6780] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.905: missing EA_INODE flag [ 249.652407][ T6780] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.905: error while reading EA inode 2 err=-117 [ 249.652476][ T3643] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 249.704480][ T3643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.716077][ T6780] EXT4-fs (loop1): 1 orphan inode deleted [ 249.724801][ T3643] usb 5-1: Product: syz [ 249.729043][ T3643] usb 5-1: Manufacturer: syz [ 249.732270][ T6780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.745557][ T3643] usb 5-1: SerialNumber: syz [ 249.768200][ T3643] usb 5-1: config 0 descriptor?? [ 249.802596][ T6759] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.823839][ T3643] hub 5-1:0.0: bad descriptor, ignoring hub [ 249.829800][ T3643] hub: probe of 5-1:0.0 failed with error -5 [ 249.875302][ T3643] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 249.995861][ T6789] loop2: detected capacity change from 0 to 1024 [ 250.056656][ T6789] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.908: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 250.085560][ T6775] loop3: detected capacity change from 0 to 32768 [ 250.110823][ T6789] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.908: couldn't read orphan inode 11 (err -117) [ 250.182467][ T6789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 250.253757][ T6789] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.908: Invalid block bitmap block 0 in block_group 0 [ 250.282041][ T6789] __quota_error: 8 callbacks suppressed [ 250.282059][ T6789] Quota error (device loop2): write_blk: dquota write failed [ 250.316084][ T4125] usb 5-1: USB disconnect, device number 11 [ 250.322194][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 250.361026][ T6789] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 250.430098][ T6789] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.908: Failed to acquire dquot type 0 [ 250.489950][ T6789] syz.2.908 (6789) used greatest stack depth: 19600 bytes left [ 250.575799][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 250.759640][ T6801] loop2: detected capacity change from 0 to 1024 [ 250.781259][ T6801] EXT4-fs: Ignoring removed oldalloc option [ 250.865641][ T6801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 250.956025][ T6812] Bluetooth: MGMT ver 1.22 [ 251.088813][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 251.231426][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 251.670230][ T4120] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.016244][ T6828] netlink: 'syz.3.922': attribute type 27 has an invalid length. [ 252.043947][ T6832] loop2: detected capacity change from 0 to 1024 [ 252.067602][ T6832] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.924: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 252.436084][ T6832] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.924: couldn't read orphan inode 11 (err -117) [ 252.624532][ T6832] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.722789][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.926'. [ 253.202989][ T6832] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.924: Invalid block bitmap block 0 in block_group 0 [ 253.258993][ T6832] Quota error (device loop2): write_blk: dquota write failed [ 253.300649][ T6832] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 253.330182][ T6832] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.924: Failed to acquire dquot type 0 [ 253.524510][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 254.212731][ T3019] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 254.321359][ T6860] Bluetooth: MGMT ver 1.22 [ 254.613818][ T3019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.635401][ T3019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.668297][ T3019] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 254.687664][ T3019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.748122][ T3019] usb 2-1: config 0 descriptor?? [ 255.582773][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.589171][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.598414][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.605711][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.812269][ T3019] usbhid 2-1:0.0: can't add hid device: -71 [ 255.818352][ T3019] usbhid: probe of 2-1:0.0 failed with error -71 [ 255.866725][ T3019] usb 2-1: USB disconnect, device number 7 [ 256.020310][ T6861] loop2: detected capacity change from 0 to 32768 [ 256.062337][ T6861] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.932 (6861) [ 256.102379][ T6861] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.122267][ T6861] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 256.190666][ T6861] BTRFS info (device loop2): setting nodatacow, compression disabled [ 256.210631][ T6861] BTRFS info (device loop2): turning on flush-on-commit [ 256.232182][ T6861] BTRFS info (device loop2): enabling auto defrag [ 256.284494][ T6861] BTRFS info (device loop2): max_inline at 0 [ 256.324908][ T6861] BTRFS info (device loop2): using free space tree [ 257.147678][ T6861] BTRFS info (device loop2): enabling ssd optimizations [ 257.532352][ T3559] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.033463][ T6870] loop4: detected capacity change from 0 to 32768 [ 258.431611][ T6870] XFS (loop4): Mounting V5 Filesystem [ 258.616311][ T6870] XFS (loop4): Ending clean mount [ 258.803363][ T3562] XFS (loop4): Unmounting Filesystem [ 258.981661][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 259.168527][ T6905] loop1: detected capacity change from 0 to 32768 [ 259.352152][ T6930] kAFS: No cell specified [ 259.589898][ T6932] loop3: detected capacity change from 0 to 1024 [ 259.614727][ T6932] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 259.626253][ T6932] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 259.639750][ T6932] jbd2_journal_init_inode: Cannot locate journal superblock [ 259.647231][ T6932] EXT4-fs (loop3): Could not load journal inode [ 259.829736][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.947'. [ 260.464883][ T6945] loop1: detected capacity change from 0 to 256 [ 260.494290][ T6941] loop3: detected capacity change from 0 to 4096 [ 260.513727][ T6945] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.530948][ T6941] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 260.585181][ T6941] ntfs3: loop3: mft corrupted [ 260.600108][ T6941] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 260.641175][ T6941] ntfs3: loop3: Failed to load $MFT. [ 261.842050][ T6962] loop2: detected capacity change from 0 to 64 [ 262.063137][ T6962] Trying to free block not in datazone [ 262.072355][ T4124] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 262.111201][ T6962] Trying to free block not in datazone [ 262.121192][ T6962] Trying to free block not in datazone [ 262.151558][ T6962] Trying to free block not in datazone [ 262.161674][ T6962] minix_free_block (loop2:6): bit already cleared [ 262.202305][ T6962] Trying to free block not in datazone [ 262.207861][ T6962] Trying to free block not in datazone [ 262.312190][ T4124] usb 4-1: Using ep0 maxpacket: 16 [ 263.316669][ T6972] loop1: detected capacity change from 0 to 1024 [ 263.324962][ T6972] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 263.336078][ T6972] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 263.347127][ T4124] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 263.357379][ T6972] jbd2_journal_init_inode: Cannot locate journal superblock [ 263.364817][ T6972] EXT4-fs (loop1): Could not load journal inode [ 263.522415][ T4124] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=93.ea [ 263.531520][ T4124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.648562][ T4124] usb 4-1: Product: syz [ 263.661640][ T4124] usb 4-1: Manufacturer: syz [ 263.688953][ T4124] usb 4-1: SerialNumber: syz [ 263.869203][ T3808] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.024331][ T4124] gspca_main: t613-2.14.0 probing 17a1:0128 [ 264.072293][ T4124] gspca_t613: unknown sensor 0000 [ 264.077423][ T4124] t613: probe of 4-1:4.0 failed with error -22 [ 264.100160][ T4124] usb 4-1: USB disconnect, device number 6 [ 264.562152][ T3643] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 265.393234][ T3643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.655722][ T3643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.686357][ T3643] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.716283][ T3643] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 265.741607][ T3643] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.816426][ T3643] usb 1-1: config 0 descriptor?? [ 266.471852][ T7010] loop3: detected capacity change from 0 to 4096 [ 266.483662][ T7013] loop4: detected capacity change from 0 to 512 [ 266.525782][ T7010] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 266.563487][ T7013] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.621212][ T7013] EXT4-fs: old and new quota format mixing [ 266.893458][ T7013] loop4: detected capacity change from 0 to 4096 [ 267.017037][ T7020] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.282897][ T3019] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 268.363795][ T7032] loop2: detected capacity change from 0 to 512 [ 268.412488][ T3019] usb 4-1: Using ep0 maxpacket: 32 [ 268.433017][ T3643] usbhid 1-1:0.0: can't add hid device: -71 [ 268.439305][ T3643] usbhid: probe of 1-1:0.0 failed with error -71 [ 268.475768][ T3643] usb 1-1: USB disconnect, device number 5 [ 268.528068][ T7032] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.982: casefold flag without casefold feature [ 268.562259][ T3019] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 268.611677][ T7032] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.982: missing EA_INODE flag [ 268.656183][ T7032] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.982: error while reading EA inode 2 err=-117 [ 268.724704][ T7032] EXT4-fs (loop2): 1 orphan inode deleted [ 268.739377][ T7032] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 268.765347][ T7043] input: syz0 as /devices/virtual/input/input14 [ 268.778550][ T3019] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 268.799233][ T3019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.818315][ T3019] usb 4-1: Product: syz [ 268.838182][ T3019] usb 4-1: Manufacturer: syz [ 268.854264][ T3019] usb 4-1: SerialNumber: syz [ 268.877506][ T3019] usb 4-1: config 0 descriptor?? [ 268.922456][ T7018] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 268.935083][ T7043] loop4: detected capacity change from 0 to 256 [ 268.944330][ T3019] hub 4-1:0.0: bad descriptor, ignoring hub [ 268.961855][ T3019] hub: probe of 4-1:0.0 failed with error -5 [ 268.971500][ T3019] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 269.053901][ T7043] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 269.247834][ T3599] usb 4-1: USB disconnect, device number 7 [ 269.444312][ T7029] loop1: detected capacity change from 0 to 32768 [ 269.530201][ T7060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.556789][ T7029] XFS (loop1): Mounting V5 Filesystem [ 269.743291][ T7068] loop4: detected capacity change from 0 to 256 [ 269.834862][ T7029] XFS (loop1): Ending clean mount [ 269.870798][ T7068] kAFS: No cell specified [ 269.970071][ T3550] XFS (loop1): Unmounting Filesystem [ 270.166851][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 270.288444][ T3019] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.347657][ T3019] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.460135][ T3019] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 270.840795][ T7092] loop2: detected capacity change from 0 to 512 [ 270.894028][ T3820] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.899558][ T7092] loop2: detected capacity change from 0 to 16 [ 270.922776][ T3820] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.952754][ T3820] Buffer I/O error on dev loop2, logical block 0, async page read [ 270.978663][ T7092] erofs: (device loop2): mounted with root inode @ nid 36. [ 271.002214][ T3599] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 271.024469][ T7095] loop4: detected capacity change from 0 to 256 [ 271.040101][ T7097] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 271.542671][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.572743][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.597376][ T3599] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.626570][ T3599] usb 2-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 271.660079][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.680376][ T3599] usb 2-1: config 0 descriptor?? [ 271.867164][ T7115] loop3: detected capacity change from 0 to 4096 [ 271.883660][ T7115] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 271.962784][ T7085] loop1: detected capacity change from 0 to 256 [ 271.988348][ T7085] FAT-fs (loop1): Unrecognized mount option "time_offset=0x0000000000000e e0®{1fa" or missing value [ 272.039568][ T7115] ntfs3: loop3: failed to convert "076c" to cp869 [ 272.279957][ T7127] loop2: detected capacity change from 0 to 256 [ 272.305257][ T7129] loop1: detected capacity change from 0 to 512 [ 272.363148][ T7129] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.471433][ T7129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.994: bg 0: block 264: padding at end of block bitmap is not set [ 272.555769][ T7129] EXT4-fs (loop1): Remounting filesystem read-only [ 272.566858][ T7129] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 272.592869][ T7129] EXT4-fs (loop1): 1 truncate cleaned up [ 272.598754][ T7129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 272.627341][ T7129] EXT4-fs (loop1): unmounting filesystem. [ 272.994358][ T7146] binder: 7145:7146 ioctl c00c620f 20000100 returned -22 [ 274.542448][ T3599] usbhid 2-1:0.0: can't add hid device: -71 [ 274.550458][ T3599] usbhid: probe of 2-1:0.0 failed with error -71 [ 274.620729][ T3599] usb 2-1: USB disconnect, device number 8 [ 274.765286][ T7165] loop4: detected capacity change from 0 to 256 [ 275.409452][ T7178] binder: 7177:7178 ioctl c00c620f 20000100 returned -22 [ 275.896639][ T7184] loop1: detected capacity change from 0 to 1024 [ 275.921884][ T7184] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 275.932915][ T7184] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 275.958081][ T7184] jbd2_journal_init_inode: Cannot locate journal superblock [ 275.965660][ T7184] EXT4-fs (loop1): Could not load journal inode [ 277.247044][ T7198] loop3: detected capacity change from 0 to 512 [ 277.284671][ T7198] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 277.297305][ T7201] loop1: detected capacity change from 0 to 256 [ 277.309466][ T7198] UDF-fs: Scanning with blocksize 512 failed [ 277.312300][ T3593] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 277.332975][ T7198] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 277.362208][ T7198] UDF-fs: Scanning with blocksize 1024 failed [ 277.384249][ T7198] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 277.391691][ T7198] UDF-fs: Scanning with blocksize 2048 failed [ 277.443008][ T7198] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 277.480694][ T7198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.568593][ T27] audit: type=1800 audit(1720532775.439:95): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1045" name="bus" dev="loop3" ino=32 res=0 errno=0 [ 277.602431][ T3593] usb 3-1: Using ep0 maxpacket: 32 [ 277.705318][ T7183] loop4: detected capacity change from 0 to 32768 [ 277.728143][ T3593] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 277.776752][ T7183] XFS (loop4): Mounting V5 Filesystem [ 278.017510][ T7183] XFS (loop4): Ending clean mount [ 278.042567][ T7219] input: syz0 as /devices/virtual/input/input16 [ 278.102479][ T3593] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 278.121280][ T3593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.166215][ T3593] usb 3-1: Product: syz [ 278.357228][ T3593] usb 3-1: Manufacturer: syz [ 278.518703][ T3593] usb 3-1: SerialNumber: syz [ 278.744777][ T3593] usb 3-1: config 0 descriptor?? [ 278.760166][ T7229] loop3: detected capacity change from 0 to 256 [ 278.812433][ T7193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.833017][ T3593] hub 3-1:0.0: bad descriptor, ignoring hub [ 278.838991][ T3593] hub: probe of 3-1:0.0 failed with error -5 [ 278.864350][ T7229] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 278.864659][ T3593] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 278.976581][ T3562] XFS (loop4): Unmounting Filesystem [ 279.234730][ T153] usb 3-1: USB disconnect, device number 9 [ 279.252165][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 279.570894][ T7238] loop3: detected capacity change from 0 to 8192 [ 279.611628][ T7238] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.683006][ T7238] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 279.736610][ T7238] REISERFS (device loop3): using ordered data mode [ 279.772165][ T7238] reiserfs: using flush barriers [ 279.812825][ T3567] Bluetooth: hci1: command tx timeout [ 279.870451][ T7238] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.934419][ T7238] REISERFS (device loop3): checking transaction log (loop3) [ 279.977559][ T7238] REISERFS (device loop3): Using r5 hash to sort names [ 280.015850][ T7238] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 280.081134][ T7238] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 280.127996][ T7249] loop1: detected capacity change from 0 to 256 [ 280.265931][ T7251] loop2: detected capacity change from 0 to 64 [ 280.348436][ T7251] hfs: filesystem is marked locked, mounting read-only. [ 280.590704][ T7255] loop2: detected capacity change from 0 to 1024 [ 280.736422][ T7255] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.974611][ T7264] trusted_key: encrypted_key: keylen parameter is missing [ 281.056463][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 281.231923][ T3593] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 281.261766][ T7243] loop4: detected capacity change from 0 to 32768 [ 281.268807][ T3593] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 281.299935][ T3593] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 281.475836][ T7243] XFS (loop4): Mounting V5 Filesystem [ 281.516560][ T7274] loop1: detected capacity change from 0 to 4096 [ 281.635713][ T7243] XFS (loop4): Ending clean mount [ 281.657108][ T7274] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 281.693503][ T7274] ntfs3: loop1: Failed to load $Extend. [ 281.787662][ T7274] ntfs3: loop1: ino=1f, "file2" attr_set_size [ 281.829357][ T7282] loop2: detected capacity change from 0 to 8192 [ 281.858733][ T3562] XFS (loop4): Unmounting Filesystem [ 281.889519][ T7282] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 281.932425][ T7282] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 281.998449][ T7282] REISERFS (device loop2): using ordered data mode [ 282.041326][ T7282] reiserfs: using flush barriers [ 282.116115][ T7282] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 282.174144][ T7282] REISERFS (device loop2): checking transaction log (loop2) [ 282.189929][ T7282] REISERFS (device loop2): Using r5 hash to sort names [ 282.197818][ T7300] loop3: detected capacity change from 0 to 1024 [ 282.198303][ T7282] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 282.255252][ T7282] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 282.268857][ T7300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.402258][ T153] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 282.488502][ T5763] EXT4-fs (loop3): unmounting filesystem. [ 282.682275][ T153] usb 2-1: Using ep0 maxpacket: 16 [ 282.802409][ T153] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 282.983430][ T153] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=93.ea [ 283.021288][ T153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.102545][ T153] usb 2-1: Product: syz [ 283.142562][ T153] usb 2-1: Manufacturer: syz [ 283.200384][ T153] usb 2-1: SerialNumber: syz [ 284.091535][ T153] gspca_main: t613-2.14.0 probing 17a1:0128 [ 284.152390][ T153] gspca_t613: unknown sensor 0000 [ 284.157550][ T153] t613: probe of 2-1:4.0 failed with error -22 [ 284.177919][ T7328] loop2: detected capacity change from 0 to 1024 [ 284.204420][ T153] usb 2-1: USB disconnect, device number 9 [ 284.226539][ T7328] EXT4-fs: Ignoring removed nobh option [ 284.257436][ T7328] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.312550][ T7328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 284.535670][ T7328] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 284.601354][ T7328] EXT4-fs (loop2): This should not happen!! Data will be lost [ 284.601354][ T7328] [ 284.672210][ T7328] EXT4-fs (loop2): Total free blocks count 0 [ 284.684963][ T7328] EXT4-fs (loop2): Free/Dirty block details [ 284.702654][ T7328] EXT4-fs (loop2): free_blocks=0 [ 284.721489][ T7328] EXT4-fs (loop2): dirty_blocks=0 [ 284.752383][ T7328] EXT4-fs (loop2): Block reservation details [ 284.772169][ T7328] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 284.896889][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 285.131162][ T7344] loop1: detected capacity change from 0 to 8192 [ 285.161020][ T3567] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 285.203056][ T7344] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 285.242748][ T7344] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 285.291917][ T7344] REISERFS (device loop1): using ordered data mode [ 285.299030][ T7344] reiserfs: using flush barriers [ 285.337858][ T7344] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.357324][ T7344] REISERFS (device loop1): checking transaction log (loop1) [ 285.384605][ T7344] REISERFS (device loop1): Using r5 hash to sort names [ 285.523454][ T7344] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 285.594772][ T7344] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 286.430597][ T7369] loop4: detected capacity change from 0 to 1024 [ 286.875034][ T4022] hfsplus: b-tree write err: -5, ino 4 [ 287.418114][ T7393] loop4: detected capacity change from 0 to 1024 [ 287.443749][ T7393] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 287.455595][ T7393] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 287.474128][ T7393] jbd2_journal_init_inode: Cannot locate journal superblock [ 287.481945][ T7393] EXT4-fs (loop4): Could not load journal inode [ 289.285832][ T7398] loop1: detected capacity change from 0 to 8192 [ 289.303315][ T7409] loop2: detected capacity change from 0 to 1024 [ 289.737020][ T7398] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 289.992176][ T7398] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 290.060061][ T7398] REISERFS (device loop1): using ordered data mode [ 290.101865][ T7398] reiserfs: using flush barriers [ 290.103889][ T3988] hfsplus: b-tree write err: -5, ino 4 [ 290.119638][ T7398] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 290.154738][ T7398] REISERFS (device loop1): checking transaction log (loop1) [ 290.184203][ T3988] hfsplus: b-tree write err: -5, ino 4 [ 290.200119][ T7398] REISERFS (device loop1): Using r5 hash to sort names [ 290.213718][ T7398] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 290.301709][ T7398] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 290.762940][ T7434] loop3: detected capacity change from 0 to 4096 [ 290.870404][ T7434] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 290.879939][ T7434] ntfs3: loop3: Failed to load $Extend. [ 290.930248][ T7434] ntfs3: loop3: ino=1f, "file2" attr_set_size [ 291.002850][ T7434] ntfs3: loop3: ino=1f, "file2" attr_set_size [ 291.209444][ T7445] loop3: detected capacity change from 0 to 1024 [ 291.242635][ T7445] EXT4-fs: Ignoring removed nobh option [ 291.258635][ T7445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 291.316925][ T7449] loop1: detected capacity change from 0 to 1024 [ 291.365743][ T7445] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 291.423749][ T46] hfsplus: b-tree write err: -5, ino 4 [ 291.585605][ T7445] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 291.628341][ T7445] EXT4-fs (loop3): This should not happen!! Data will be lost [ 291.628341][ T7445] [ 291.669081][ T7445] EXT4-fs (loop3): Total free blocks count 0 [ 291.688788][ T7445] EXT4-fs (loop3): Free/Dirty block details [ 291.742354][ T7445] EXT4-fs (loop3): free_blocks=0 [ 291.747640][ T7445] EXT4-fs (loop3): dirty_blocks=0 [ 291.774015][ T7445] EXT4-fs (loop3): Block reservation details [ 291.792294][ T7445] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 291.876568][ T3567] Bluetooth: hci0: unexpected event for opcode 0x202d [ 291.891724][ T5763] EXT4-fs (loop3): unmounting filesystem. [ 291.957070][ T7431] loop4: detected capacity change from 0 to 40427 [ 292.023598][ T7464] loop2: detected capacity change from 0 to 8192 [ 292.057848][ T7431] F2FS-fs (loop4): invalid crc value [ 292.064198][ T7464] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 292.095929][ T7464] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 292.109569][ T7431] F2FS-fs (loop4): Found nat_bits in checkpoint [ 292.188271][ T7464] REISERFS (device loop2): using ordered data mode [ 292.216157][ T7464] reiserfs: using flush barriers [ 292.297107][ T7464] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 292.514503][ T7464] REISERFS (device loop2): checking transaction log (loop2) [ 292.544720][ T7431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 292.628246][ T7464] REISERFS (device loop2): Using r5 hash to sort names [ 292.806581][ T7464] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 293.079791][ T7464] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 293.193526][ T3562] syz-executor: attempt to access beyond end of device [ 293.193526][ T3562] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.802260][ T3808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 294.057158][ T3808] usb 1-1: Using ep0 maxpacket: 8 [ 294.199368][ T3808] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 294.209602][ T3808] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 294.262235][ T3808] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 101, changing to 10 [ 294.269543][ T7483] loop1: detected capacity change from 0 to 32768 [ 294.294298][ T3808] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 26213, setting to 1024 [ 294.310641][ T7483] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.1143 (7483) [ 294.321761][ T5779] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 294.333305][ T7482] loop3: detected capacity change from 0 to 32768 [ 294.343498][ T7495] loop4: detected capacity change from 0 to 4096 [ 294.367036][ T7495] ntfs: (device loop4): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 294.375062][ T7482] XFS: ikeep mount option is deprecated. [ 294.419764][ T7483] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 294.426252][ T5779] syz.0.600: attempt to access beyond end of device [ 294.426252][ T5779] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 294.451516][ T5779] syz.0.600: attempt to access beyond end of device [ 294.451516][ T5779] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 294.473631][ T5779] syz.0.600: attempt to access beyond end of device [ 294.473631][ T5779] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 294.474033][ T7483] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 294.487902][ T5779] syz.0.600: attempt to access beyond end of device [ 294.487902][ T5779] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 294.542835][ T7483] BTRFS info (device loop1): disabling tree log [ 294.553923][ T7482] XFS (loop3): Mounting V5 Filesystem [ 294.562694][ T7483] BTRFS info (device loop1): turning on sync discard [ 294.569447][ T7483] BTRFS info (device loop1): force clearing of disk cache [ 294.586235][ T5779] syz.0.600: attempt to access beyond end of device [ 294.586235][ T5779] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 294.612687][ T5779] syz.0.600: attempt to access beyond end of device [ 294.612687][ T5779] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 294.663416][ T7483] BTRFS info (device loop1): enabling ssd optimizations [ 294.671070][ T7483] BTRFS info (device loop1): using spread ssd allocation scheme [ 294.678906][ T7483] BTRFS info (device loop1): using free space tree [ 294.688072][ T5779] syz.0.600: attempt to access beyond end of device [ 294.688072][ T5779] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 294.724538][ T7482] XFS (loop3): Ending clean mount [ 294.755490][ T5779] syz.0.600: attempt to access beyond end of device [ 294.755490][ T5779] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 294.788012][ T7482] XFS (loop3): Quotacheck needed: Please wait. [ 294.872316][ T3808] usb 1-1: string descriptor 0 read error: -22 [ 294.878602][ T3808] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 294.880430][ T7482] XFS (loop3): Quotacheck: Done. [ 294.893785][ T5779] syz.0.600: attempt to access beyond end of device [ 294.893785][ T5779] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 294.903126][ T3808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.982798][ T7483] BTRFS info (device loop1): rebuilding free space tree [ 295.096425][ T3808] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.167919][ T5763] XFS (loop3): Unmounting Filesystem [ 295.461015][ T3550] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 295.486286][ T3600] usb 1-1: USB disconnect, device number 6 [ 295.892442][ T4124] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 296.132236][ T4124] usb 5-1: Using ep0 maxpacket: 16 [ 296.201788][ T7537] loop1: detected capacity change from 0 to 8192 [ 296.241860][ T7537] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 296.252436][ T4124] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 296.276192][ T7537] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 296.282420][ T4124] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.303590][ T7537] REISERFS (device loop1): using ordered data mode [ 296.312404][ T7537] reiserfs: using flush barriers [ 296.381624][ T7531] loop2: detected capacity change from 0 to 40427 [ 296.389978][ T7537] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.412111][ T4124] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 296.421099][ T4124] usb 5-1: config 1 has no interface number 1 [ 296.476274][ T7537] REISERFS (device loop1): checking transaction log (loop1) [ 296.494906][ T4124] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 296.515317][ T7531] F2FS-fs (loop2): invalid crc value [ 296.536402][ T7537] REISERFS (device loop1): Using r5 hash to sort names [ 296.548638][ T4124] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.578573][ T7537] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 296.595440][ T7531] F2FS-fs (loop2): Found nat_bits in checkpoint [ 296.596865][ T7537] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 296.752505][ T4124] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.789579][ T4124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.801460][ T4124] usb 5-1: Product: syz [ 296.802835][ T7531] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 296.828330][ T4124] usb 5-1: Manufacturer: syz [ 296.871400][ T4124] usb 5-1: SerialNumber: syz [ 297.311138][ T4124] usb 5-1: USB disconnect, device number 12 [ 297.394687][ T3820] udevd[3820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.399290][ T7566] loop1: detected capacity change from 0 to 512 [ 297.509501][ T7566] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #3: comm syz.1.1169: corrupted inode contents [ 297.630665][ T7566] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #3: comm syz.1.1169: mark_inode_dirty error [ 297.683578][ T7566] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #3: comm syz.1.1169: corrupted inode contents [ 297.748668][ T7566] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1169: mark_inode_dirty error [ 297.776908][ T7566] Quota error (device loop1): write_blk: dquota write failed [ 297.807390][ T7566] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 297.828444][ T7566] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.1169: Failed to acquire dquot type 0 [ 297.870026][ T7574] loop2: detected capacity change from 0 to 4096 [ 297.902543][ T7566] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1169: corrupted inode contents [ 297.917359][ T7574] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 297.922169][ T7576] device vlan2 entered promiscuous mode [ 297.952451][ T7566] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #16: comm syz.1.1169: mark_inode_dirty error [ 297.980677][ T7566] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1169: corrupted inode contents [ 298.007476][ T7566] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1169: mark_inode_dirty error [ 298.068161][ T7566] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1169: corrupted inode contents [ 298.131081][ T7566] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 298.182624][ T7566] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1169: corrupted inode contents [ 298.202921][ T5779] bio_check_eod: 12682 callbacks suppressed [ 298.202939][ T5779] syz.0.600: attempt to access beyond end of device [ 298.202939][ T5779] loop0: rw=0, sector=88536, nr_sectors = 8 limit=40427 [ 298.272683][ T7566] EXT4-fs error (device loop1): ext4_truncate:4300: inode #16: comm syz.1.1169: mark_inode_dirty error [ 298.284224][ T5779] syz.0.600: attempt to access beyond end of device [ 298.284224][ T5779] loop0: rw=0, sector=88544, nr_sectors = 8 limit=40427 [ 298.310458][ T7566] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 298.310583][ T5779] syz.0.600: attempt to access beyond end of device [ 298.310583][ T5779] loop0: rw=0, sector=88552, nr_sectors = 8 limit=40427 [ 298.361985][ T7566] EXT4-fs (loop1): 1 truncate cleaned up [ 298.369527][ T7564] loop3: detected capacity change from 0 to 32768 [ 298.382200][ T7566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 298.401444][ T7564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1168 (7564) [ 298.413989][ T7566] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038 (0x7fffffff) [ 298.425577][ T5779] syz.0.600: attempt to access beyond end of device [ 298.425577][ T5779] loop0: rw=0, sector=88560, nr_sectors = 8 limit=40427 [ 298.449459][ T7564] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.476555][ T7564] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 298.492937][ T5779] syz.0.600: attempt to access beyond end of device [ 298.492937][ T5779] loop0: rw=0, sector=88568, nr_sectors = 8 limit=40427 [ 298.517791][ T7564] BTRFS info (device loop3): using free space tree [ 298.546803][ T5779] syz.0.600: attempt to access beyond end of device [ 298.546803][ T5779] loop0: rw=0, sector=88576, nr_sectors = 8 limit=40427 [ 298.568942][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 298.596086][ T5779] syz.0.600: attempt to access beyond end of device [ 298.596086][ T5779] loop0: rw=0, sector=88584, nr_sectors = 8 limit=40427 [ 298.715686][ T5779] syz.0.600: attempt to access beyond end of device [ 298.715686][ T5779] loop0: rw=0, sector=88592, nr_sectors = 8 limit=40427 [ 298.718565][ T7564] BTRFS info (device loop3): enabling ssd optimizations [ 298.761213][ T5779] syz.0.600: attempt to access beyond end of device [ 298.761213][ T5779] loop0: rw=0, sector=88600, nr_sectors = 8 limit=40427 [ 298.790799][ T5763] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.850021][ T5779] syz.0.600: attempt to access beyond end of device [ 298.850021][ T5779] loop0: rw=0, sector=88608, nr_sectors = 8 limit=40427 [ 299.747851][ T7619] block nbd3: not configured, cannot reconfigure [ 300.564088][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 300.617255][ T7630] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 300.617255][ T7630] SÃȘØÈžZ§6ŸÂ' [ 300.678581][ T7632] loop1: detected capacity change from 0 to 1024 [ 302.819428][ T3566] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 302.896473][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1200'. [ 303.059411][ T7652] loop2: detected capacity change from 0 to 32768 [ 303.217803][ T5779] bio_check_eod: 11209 callbacks suppressed [ 303.217824][ T5779] syz.0.600: attempt to access beyond end of device [ 303.217824][ T5779] loop0: rw=524288, sector=87208, nr_sectors = 8 limit=40427 [ 303.269359][ T7652] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.1193 (7652) [ 303.317457][ T5779] syz.0.600: attempt to access beyond end of device [ 303.317457][ T5779] loop0: rw=524288, sector=87216, nr_sectors = 8 limit=40427 [ 303.346232][ T5779] syz.0.600: attempt to access beyond end of device [ 303.346232][ T5779] loop0: rw=524288, sector=87224, nr_sectors = 8 limit=40427 [ 303.519673][ T7678] loop4: detected capacity change from 0 to 1024 [ 303.605438][ T7678] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 303.616542][ T7678] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 303.633233][ T7678] jbd2_journal_init_inode: Cannot locate journal superblock [ 303.640612][ T7678] EXT4-fs (loop4): Could not load journal inode [ 303.733754][ T3566] Bluetooth: hci1: command 0x0406 tx timeout [ 304.008751][ T5779] syz.0.600: attempt to access beyond end of device [ 304.008751][ T5779] loop0: rw=524288, sector=87232, nr_sectors = 8 limit=40427 [ 304.144044][ T7652] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 304.149549][ T5779] syz.0.600: attempt to access beyond end of device [ 304.149549][ T5779] loop0: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 304.168782][ T5779] syz.0.600: attempt to access beyond end of device [ 304.168782][ T5779] loop0: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 304.183327][ T5779] syz.0.600: attempt to access beyond end of device [ 304.183327][ T5779] loop0: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 304.197311][ T5779] syz.0.600: attempt to access beyond end of device [ 304.197311][ T5779] loop0: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 304.209166][ T7652] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 304.211412][ T5779] syz.0.600: attempt to access beyond end of device [ 304.211412][ T5779] loop0: rw=524288, sector=87272, nr_sectors = 8 limit=40427 [ 304.315544][ T7652] BTRFS info (device loop2): disabling tree log [ 304.322547][ T5779] syz.0.600: attempt to access beyond end of device [ 304.322547][ T5779] loop0: rw=524288, sector=87280, nr_sectors = 8 limit=40427 [ 304.352358][ T7652] BTRFS info (device loop2): turning on sync discard [ 304.471772][ T7652] BTRFS info (device loop2): force clearing of disk cache [ 304.482345][ T7652] BTRFS info (device loop2): enabling ssd optimizations [ 304.517278][ T7652] BTRFS info (device loop2): using spread ssd allocation scheme [ 304.568111][ T7652] BTRFS info (device loop2): using free space tree [ 305.370817][ T3599] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 305.391461][ T7652] BTRFS error (device loop2): open_ctree failed [ 307.430939][ T3566] Bluetooth: hci1: command 0x0406 tx timeout [ 307.525758][ T7719] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 307.525758][ T7719] SÃȘØÈžZ§6ŸÂ' [ 307.762308][ T3599] usb 1-1: Using ep0 maxpacket: 32 [ 307.850121][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 307.867885][ T3567] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 307.955486][ T3599] usb 1-1: device descriptor read/all, error -71 [ 308.223802][ T5779] bio_check_eod: 5120 callbacks suppressed [ 308.223820][ T5779] syz.0.600: attempt to access beyond end of device [ 308.223820][ T5779] loop0: rw=524288, sector=88648, nr_sectors = 8 limit=40427 [ 308.354400][ T5779] syz.0.600: attempt to access beyond end of device [ 308.354400][ T5779] loop0: rw=524288, sector=88656, nr_sectors = 8 limit=40427 [ 308.476173][ T5779] syz.0.600: attempt to access beyond end of device [ 308.476173][ T5779] loop0: rw=524288, sector=88664, nr_sectors = 8 limit=40427 [ 308.507666][ T7748] loop4: detected capacity change from 0 to 256 [ 308.530161][ T5779] syz.0.600: attempt to access beyond end of device [ 308.530161][ T5779] loop0: rw=524288, sector=88672, nr_sectors = 8 limit=40427 [ 308.565911][ T7748] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 308.580692][ T5779] syz.0.600: attempt to access beyond end of device [ 308.580692][ T5779] loop0: rw=524288, sector=88680, nr_sectors = 8 limit=40427 [ 308.658511][ T5779] syz.0.600: attempt to access beyond end of device [ 308.658511][ T5779] loop0: rw=524288, sector=88688, nr_sectors = 8 limit=40427 [ 308.764545][ T5779] syz.0.600: attempt to access beyond end of device [ 308.764545][ T5779] loop0: rw=524288, sector=88696, nr_sectors = 8 limit=40427 [ 308.830905][ T7755] loop3: detected capacity change from 0 to 1024 [ 308.875721][ T5779] syz.0.600: attempt to access beyond end of device [ 308.875721][ T5779] loop0: rw=524288, sector=88704, nr_sectors = 8 limit=40427 [ 308.953491][ T5779] syz.0.600: attempt to access beyond end of device [ 308.953491][ T5779] loop0: rw=524288, sector=88712, nr_sectors = 8 limit=40427 [ 309.014152][ T5779] syz.0.600: attempt to access beyond end of device [ 309.014152][ T5779] loop0: rw=524288, sector=88720, nr_sectors = 8 limit=40427 [ 309.422931][ T3593] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 309.672202][ T3593] usb 4-1: Using ep0 maxpacket: 8 [ 309.792414][ T3593] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 309.824238][ T3593] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.843312][ T7750] loop2: detected capacity change from 0 to 32768 [ 309.852323][ T3593] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 101, changing to 10 [ 309.865472][ T7750] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.1223 (7750) [ 309.892197][ T3567] Bluetooth: hci1: command 0x0406 tx timeout [ 309.918764][ T3593] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 26213, setting to 1024 [ 309.946201][ T7750] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 309.982998][ T7750] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 310.043362][ T7750] BTRFS info (device loop2): disabling tree log [ 310.052440][ T7750] BTRFS info (device loop2): turning on sync discard [ 310.075212][ T7750] BTRFS info (device loop2): force clearing of disk cache [ 310.095532][ T7750] BTRFS info (device loop2): enabling ssd optimizations [ 310.112468][ T7750] BTRFS info (device loop2): using spread ssd allocation scheme [ 310.140644][ T7750] BTRFS info (device loop2): using free space tree [ 310.182485][ T3593] usb 4-1: string descriptor 0 read error: -22 [ 310.189342][ T3593] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 310.229932][ T3593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.290064][ T3593] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 310.403686][ T7750] BTRFS info (device loop2): rebuilding free space tree [ 310.424528][ T7781] loop1: detected capacity change from 0 to 512 [ 310.433524][ T7761] loop4: detected capacity change from 0 to 32768 [ 310.460649][ T7761] XFS: ikeep mount option is deprecated. [ 310.520050][ T7781] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #3: comm syz.1.1232: corrupted inode contents [ 310.609261][ T3593] usb 4-1: USB disconnect, device number 8 [ 310.612848][ T7781] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #3: comm syz.1.1232: mark_inode_dirty error [ 310.641697][ T7781] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #3: comm syz.1.1232: corrupted inode contents [ 310.659695][ T7781] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1232: mark_inode_dirty error [ 310.681913][ T7781] Quota error (device loop1): write_blk: dquota write failed [ 310.689625][ T7781] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 310.700882][ T7781] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.1232: Failed to acquire dquot type 0 [ 310.716305][ T7761] XFS (loop4): Mounting V5 Filesystem [ 310.734104][ T7781] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1232: corrupted inode contents [ 310.762290][ T7781] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #16: comm syz.1.1232: mark_inode_dirty error [ 310.816378][ T7781] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1232: corrupted inode contents [ 310.819834][ T7761] XFS (loop4): Ending clean mount [ 310.846786][ T7781] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1232: mark_inode_dirty error [ 310.851417][ T3559] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 310.882924][ T7781] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1232: corrupted inode contents [ 310.931948][ T7761] XFS (loop4): Quotacheck needed: Please wait. [ 310.939323][ T7781] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 311.008527][ T7781] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #16: comm syz.1.1232: corrupted inode contents [ 311.129546][ T7781] EXT4-fs error (device loop1): ext4_truncate:4300: inode #16: comm syz.1.1232: mark_inode_dirty error [ 311.178185][ T7781] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 311.234402][ T7781] EXT4-fs (loop1): 1 truncate cleaned up [ 311.240250][ T7781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 311.240270][ T7761] XFS (loop4): Quotacheck: Done. [ 311.311779][ T7781] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038 (0x7fffffff) [ 311.394224][ T3562] XFS (loop4): Unmounting Filesystem [ 311.458589][ T7781] syz.1.1232 (7781) used greatest stack depth: 19296 bytes left [ 311.494028][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 311.722979][ T3806] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 312.903051][ T3806] usb 3-1: Using ep0 maxpacket: 16 [ 313.037060][ T3806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.126912][ T3806] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.237601][ T5779] bio_check_eod: 12901 callbacks suppressed [ 313.238784][ T5779] syz.0.600: attempt to access beyond end of device [ 313.238784][ T5779] loop0: rw=524288, sector=88976, nr_sectors = 8 limit=40427 [ 313.368024][ T3806] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.477446][ T3806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.701926][ T3806] usb 3-1: config 0 descriptor?? [ 313.763392][ T5779] syz.0.600: attempt to access beyond end of device [ 313.763392][ T5779] loop0: rw=524288, sector=88984, nr_sectors = 8 limit=40427 [ 313.780636][ T5779] syz.0.600: attempt to access beyond end of device [ 313.780636][ T5779] loop0: rw=524288, sector=88992, nr_sectors = 8 limit=40427 [ 313.801450][ T5779] syz.0.600: attempt to access beyond end of device [ 313.801450][ T5779] loop0: rw=524288, sector=89000, nr_sectors = 8 limit=40427 [ 313.819544][ T5779] syz.0.600: attempt to access beyond end of device [ 313.819544][ T5779] loop0: rw=524288, sector=89008, nr_sectors = 8 limit=40427 [ 313.833914][ T5779] syz.0.600: attempt to access beyond end of device [ 313.833914][ T5779] loop0: rw=524288, sector=89016, nr_sectors = 8 limit=40427 [ 313.848232][ T5779] syz.0.600: attempt to access beyond end of device [ 313.848232][ T5779] loop0: rw=524288, sector=89024, nr_sectors = 8 limit=40427 [ 313.865891][ T5779] syz.0.600: attempt to access beyond end of device [ 313.865891][ T5779] loop0: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 313.884538][ T5779] syz.0.600: attempt to access beyond end of device [ 313.884538][ T5779] loop0: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 313.900907][ T5779] syz.0.600: attempt to access beyond end of device [ 313.900907][ T5779] loop0: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 314.143049][ T3567] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 314.711727][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 314.866857][ T7854] loop4: detected capacity change from 0 to 256 [ 314.897387][ T7854] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 316.282221][ T3806] usbhid 3-1:0.0: can't add hid device: -71 [ 316.288306][ T3806] usbhid: probe of 3-1:0.0 failed with error -71 [ 316.320711][ T3806] usb 3-1: USB disconnect, device number 10 [ 317.020038][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.028616][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.409470][ T3567] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 318.044480][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 318.135239][ T3567] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 318.135373][ T3567] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 318.251906][ T5779] bio_check_eod: 9282 callbacks suppressed [ 318.251924][ T5779] syz.0.600: attempt to access beyond end of device [ 318.251924][ T5779] loop0: rw=0, sector=88072, nr_sectors = 8 limit=40427 [ 318.291655][ T7908] syz.4.1265 (7908): attempted to duplicate a private mapping with mremap. This is not supported. [ 318.349965][ T7910] loop1: detected capacity change from 0 to 256 [ 318.471169][ T7910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 318.492768][ T5779] syz.0.600: attempt to access beyond end of device [ 318.492768][ T5779] loop0: rw=0, sector=88080, nr_sectors = 8 limit=40427 [ 318.546383][ T5779] syz.0.600: attempt to access beyond end of device [ 318.546383][ T5779] loop0: rw=0, sector=88088, nr_sectors = 8 limit=40427 [ 318.566204][ T5779] syz.0.600: attempt to access beyond end of device [ 318.566204][ T5779] loop0: rw=0, sector=88096, nr_sectors = 8 limit=40427 [ 318.588829][ T5779] syz.0.600: attempt to access beyond end of device [ 318.588829][ T5779] loop0: rw=0, sector=88104, nr_sectors = 8 limit=40427 [ 318.758579][ T5779] syz.0.600: attempt to access beyond end of device [ 318.758579][ T5779] loop0: rw=0, sector=88112, nr_sectors = 8 limit=40427 [ 318.773890][ T5779] syz.0.600: attempt to access beyond end of device [ 318.773890][ T5779] loop0: rw=0, sector=88120, nr_sectors = 8 limit=40427 [ 318.792296][ T3718] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 319.811469][ T5779] syz.0.600: attempt to access beyond end of device [ 319.811469][ T5779] loop0: rw=0, sector=88128, nr_sectors = 8 limit=40427 [ 319.846684][ T5779] syz.0.600: attempt to access beyond end of device [ 319.846684][ T5779] loop0: rw=0, sector=88136, nr_sectors = 8 limit=40427 [ 319.892865][ T3718] usb 3-1: Using ep0 maxpacket: 16 [ 319.931281][ T5779] syz.0.600: attempt to access beyond end of device [ 319.931281][ T5779] loop0: rw=0, sector=88144, nr_sectors = 8 limit=40427 [ 320.023270][ T3718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.218534][ T3718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.231673][ T3718] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.241578][ T3718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.258236][ T3718] usb 3-1: config 0 descriptor?? [ 322.002352][ T3718] usb 3-1: can't set config #0, error -71 [ 322.031928][ T3718] usb 3-1: USB disconnect, device number 11 [ 322.232122][ T4120] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 322.250074][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 322.306426][ T7942] loop1: detected capacity change from 0 to 1024 [ 322.382807][ T7942] EXT4-fs: Ignoring removed orlov option [ 322.388522][ T7942] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.472236][ T4120] usb 4-1: Using ep0 maxpacket: 8 [ 322.489148][ T7942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 322.592675][ T4120] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 322.653893][ T4120] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.765351][ T4120] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 101, changing to 10 [ 322.792337][ T4120] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 26213, setting to 1024 [ 323.122226][ T4120] usb 4-1: string descriptor 0 read error: -22 [ 323.128529][ T4120] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 323.176409][ T4120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.232095][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 323.241930][ T4120] usb 4-1: can't set config #168, error -32 [ 323.260705][ T3718] usb 4-1: USB disconnect, device number 9 [ 323.283534][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 323.320775][ T5779] bio_check_eod: 2516 callbacks suppressed [ 323.320794][ T5779] syz.0.600: attempt to access beyond end of device [ 323.320794][ T5779] loop0: rw=524288, sector=88480, nr_sectors = 8 limit=40427 [ 323.355167][ T5779] syz.0.600: attempt to access beyond end of device [ 323.355167][ T5779] loop0: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 323.412417][ T28] INFO: task syz.0.600:5777 blocked for more than 143 seconds. [ 323.447600][ T28] Not tainted 6.1.97-syzkaller #0 [ 323.470392][ T5779] syz.0.600: attempt to access beyond end of device [ 323.470392][ T5779] loop0: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 323.470660][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.544567][ T28] task:syz.0.600 state:D stack:27576 pid:5777 ppid:3554 flags:0x00004004 [ 323.579614][ T5779] syz.0.600: attempt to access beyond end of device [ 323.579614][ T5779] loop0: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 323.594377][ T28] Call Trace: [ 323.597698][ T28] [ 323.600657][ T28] __schedule+0x142d/0x4550 [ 323.624576][ T28] ? __sched_text_start+0x8/0x8 [ 323.635001][ T7975] loop2: detected capacity change from 0 to 4096 [ 323.656009][ T7975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.661433][ T28] ? print_irqtrace_events+0x210/0x210 [ 323.668691][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 323.678350][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 323.685555][ T5779] syz.0.600: attempt to access beyond end of device [ 323.685555][ T5779] loop0: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 323.694615][ T28] schedule+0xbf/0x180 [ 323.712560][ T7975] EXT4-fs (loop2): Test dummy encryption mode enabled [ 323.720963][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 323.737225][ T5779] syz.0.600: attempt to access beyond end of device [ 323.737225][ T5779] loop0: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 323.744849][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 323.752443][ T7975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 323.778328][ T28] ? down_write_killable_nested+0x90/0x90 [ 323.789188][ T28] ? read_lock_is_recursive+0x10/0x10 [ 323.790305][ T5779] syz.0.600: attempt to access beyond end of device [ 323.790305][ T5779] loop0: rw=524288, sector=88528, nr_sectors = 8 limit=40427 [ 323.809439][ T28] ? rwsem_write_trylock+0x166/0x210 [ 323.823858][ T28] ? clear_nonspinnable+0x60/0x60 [ 323.839922][ T5779] syz.0.600: attempt to access beyond end of device [ 323.839922][ T5779] loop0: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 323.840459][ T28] ? kasan_set_track+0x60/0x70 [ 323.866374][ T5779] syz.0.600: attempt to access beyond end of device [ 323.866374][ T5779] loop0: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 323.882971][ T5779] syz.0.600: attempt to access beyond end of device [ 323.882971][ T5779] loop0: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 323.897225][ T28] __f2fs_ioctl+0x3341/0xc2a0 [ 323.897297][ T28] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 323.897327][ T28] ? __x64_compat_sys_ioctl+0x80/0x80 [ 323.897359][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 323.897390][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 323.897426][ T28] ? __kmem_cache_free+0x25c/0x3c0 [ 323.897454][ T28] ? f2fs_ioctl+0x1d0/0x1d0 [ 323.897485][ T28] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 323.897513][ T28] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 323.897541][ T28] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 323.897567][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 323.897608][ T28] ? __fget_files+0x28/0x4a0 [ 323.897651][ T28] ? __fget_files+0x28/0x4a0 [ 324.056534][ T28] ? __fget_files+0x435/0x4a0 [ 324.061301][ T28] ? __fget_files+0x28/0x4a0 [ 324.086808][ T28] ? f2fs_ioctl+0x132/0x1d0 [ 324.091405][ T28] ? f2fs_precache_extents+0x420/0x420 [ 324.100539][ T7975] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 324.118076][ T28] __se_sys_ioctl+0xf1/0x160 [ 324.150184][ T28] do_syscall_64+0x3b/0xb0 [ 324.162937][ T28] ? clear_bhb_loop+0x45/0xa0 [ 324.178861][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.199497][ T28] RIP: 0033:0x7fca39b75bd9 [ 324.204081][ T28] RSP: 002b:00007fca3a8fc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.240835][ T28] RAX: ffffffffffffffda RBX: 00007fca39d04110 RCX: 00007fca39b75bd9 [ 324.253889][ T28] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000004 [ 324.261925][ T28] RBP: 00007fca39be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 324.270015][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.278269][ T28] R13: 000000000000006e R14: 00007fca39d04110 R15: 00007fff7a05f478 [ 324.286388][ T28] [ 324.318750][ T3559] EXT4-fs (loop2): unmounting filesystem. [ 324.327640][ T28] [ 324.327640][ T28] Showing all locks held in the system: [ 324.389702][ T28] 1 lock held by rcu_tasks_kthre/12: [ 324.418854][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 324.445790][ T28] 1 lock held by rcu_tasks_trace/13: [ 324.451180][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 324.469672][ T28] 1 lock held by khungtaskd/28: [ 324.474646][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 324.491587][ T28] 2 locks held by getty/3312: [ 324.496381][ T28] #0: ffff888028b94098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 324.513329][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 324.528282][ T28] 2 locks held by kworker/0:4/3594: [ 324.535954][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 324.547593][ T28] #1: ffffc900046afd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 324.568194][ T28] 4 locks held by kworker/u4:6/3638: [ 324.576015][ T28] #0: ffff888144647938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 324.591404][ T28] #1: ffffc900048a7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 324.610331][ T28] #2: ffff888026f520e0 (&type->s_umount_key#50){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 324.620459][ T28] #3: ffff8880639f5140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 324.637296][ T28] 3 locks held by kworker/0:12/3718: [ 324.644008][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 324.660875][ T28] #1: ffffc90004a17d20 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 324.671798][ T28] #2: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 324.692420][ T28] 2 locks held by syz.0.600/5774: [ 324.697546][ T28] #0: ffff888026f52460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 324.714165][ T28] #1: ffff88805d97e2f0 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 324.729302][ T28] 2 locks held by syz.0.600/5777: [ 324.736841][ T28] #0: ffff888026f52460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 324.751126][ T28] #1: ffff88805d97e2f0 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: __f2fs_ioctl+0x3341/0xc2a0 [ 324.761997][ T28] 5 locks held by syz.0.600/5779: [ 324.767597][ T28] 1 lock held by syz.3.1285/7970: [ 324.772784][ T28] #0: ffffffff8d1301c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 324.783095][ T28] [ 324.785479][ T28] ============================================= [ 324.785479][ T28] [ 324.796275][ T28] NMI backtrace for cpu 1 [ 324.800765][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 324.808594][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 324.818758][ T28] Call Trace: [ 324.822050][ T28] [ 324.824994][ T28] dump_stack_lvl+0x1e3/0x2cb [ 324.829688][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 324.835095][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 324.840571][ T28] ? panic+0x764/0x764 [ 324.844644][ T28] ? vprintk_emit+0x622/0x740 [ 324.849334][ T28] ? printk_sprint+0x490/0x490 [ 324.854117][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 324.859265][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 324.864232][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 324.870408][ T28] ? _printk+0xd1/0x111 [ 324.874578][ T28] ? panic+0x764/0x764 [ 324.878682][ T28] ? __wake_up_klogd+0xcc/0x100 [ 324.883554][ T28] ? panic+0x764/0x764 [ 324.887632][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 324.893720][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 324.899799][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 324.905805][ T28] watchdog+0xf88/0xfd0 [ 324.910075][ T28] ? watchdog+0x1f8/0xfd0 [ 324.914491][ T28] kthread+0x28d/0x320 [ 324.918608][ T28] ? hungtask_pm_notify+0x50/0x50 [ 324.923650][ T28] ? kthread_blkcg+0xd0/0xd0 [ 324.928258][ T28] ret_from_fork+0x1f/0x30 [ 324.932716][ T28] [ 324.936564][ T28] Sending NMI from CPU 1 to CPUs 0: [ 324.941898][ C0] NMI backtrace for cpu 0 [ 324.941910][ C0] CPU: 0 PID: 3988 Comm: kworker/u4:9 Not tainted 6.1.97-syzkaller #0 [ 324.941929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 324.941941][ C0] Workqueue: bat_events batadv_nc_worker [ 324.941970][ C0] RIP: 0010:check_preemption_disabled+0x63/0x110 [ 324.942001][ C0] Code: 44 24 08 0f 85 c7 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c9 49 89 f6 49 89 ff 65 4c 8b 25 ed 2c 77 75 41 f6 44 24 2f 04 [ 324.942016][ C0] RSP: 0018:ffffc90009dc7a48 EFLAGS: 00000046 [ 324.942034][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 1ffff920013b8efc [ 324.942048][ C0] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8b3d4760 [ 324.942061][ C0] RBP: ffffc90009dc7be0 R08: dffffc0000000000 R09: fffffbfff2093845 [ 324.942076][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920013b8f58 [ 324.942090][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 324.942103][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 324.942119][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.942132][ C0] CR2: 00007f53160ce2d8 CR3: 000000007c8cf000 CR4: 00000000003526f0 [ 324.942150][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.942162][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.942174][ C0] Call Trace: [ 324.942180][ C0] [ 324.942186][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 324.942218][ C0] ? read_lock_is_recursive+0x10/0x10 [ 324.942249][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 324.942289][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 324.942320][ C0] ? nmi_handle+0x12e/0x440 [ 324.942351][ C0] ? nmi_handle+0x25/0x440 [ 324.942380][ C0] ? check_preemption_disabled+0x63/0x110 [ 324.942401][ C0] ? default_do_nmi+0x62/0x150 [ 324.942419][ C0] ? exc_nmi+0xa8/0x100 [ 324.942435][ C0] ? end_repeat_nmi+0x16/0x31 [ 324.942466][ C0] ? check_preemption_disabled+0x63/0x110 [ 324.942487][ C0] ? check_preemption_disabled+0x63/0x110 [ 324.942510][ C0] ? check_preemption_disabled+0x63/0x110 [ 324.942532][ C0] [ 324.942537][ C0] [ 324.942544][ C0] lock_acquire+0x208/0x5a0 [ 324.942572][ C0] ? read_lock_is_recursive+0x10/0x10 [ 324.942598][ C0] ? batadv_nc_worker+0xc7/0x610 [ 324.942623][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 324.942650][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 324.942679][ C0] batadv_nc_worker+0xe8/0x610 [ 324.942703][ C0] ? batadv_nc_worker+0xc7/0x610 [ 324.942726][ C0] ? batadv_nc_worker+0xc7/0x610 [ 324.942751][ C0] ? process_one_work+0x7a9/0x11d0 [ 324.942770][ C0] process_one_work+0x8a9/0x11d0 [ 324.942798][ C0] ? worker_detach_from_pool+0x260/0x260 [ 324.942820][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 324.942860][ C0] ? kthread_data+0x4e/0xc0 [ 324.942889][ C0] ? wq_worker_running+0x97/0x190 [ 324.942918][ C0] worker_thread+0xa47/0x1200 [ 324.942942][ C0] ? _raw_spin_unlock+0x40/0x40 [ 324.942969][ C0] kthread+0x28d/0x320 [ 324.942988][ C0] ? worker_clr_flags+0x190/0x190 [ 324.943007][ C0] ? kthread_blkcg+0xd0/0xd0 [ 324.943023][ C0] ret_from_fork+0x1f/0x30 [ 324.943054][ C0] [ 325.277486][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 325.284731][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 325.292644][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 325.302716][ T28] Call Trace: [ 325.306037][ T28] [ 325.308984][ T28] dump_stack_lvl+0x1e3/0x2cb [ 325.313701][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 325.319192][ T28] ? panic+0x764/0x764 [ 325.323288][ T28] ? llist_add_batch+0x160/0x1d0 [ 325.328272][ T28] ? vscnprintf+0x59/0x80 [ 325.332630][ T28] panic+0x318/0x764 [ 325.336559][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 325.342753][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 325.348278][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 325.354644][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 325.360832][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 325.367034][ T28] watchdog+0xfc7/0xfd0 [ 325.371232][ T28] ? watchdog+0x1f8/0xfd0 [ 325.375601][ T28] kthread+0x28d/0x320 [ 325.379690][ T28] ? hungtask_pm_notify+0x50/0x50 [ 325.384741][ T28] ? kthread_blkcg+0xd0/0xd0 [ 325.389363][ T28] ret_from_fork+0x1f/0x30 [ 325.393821][ T28] [ 325.397213][ T28] Kernel Offset: disabled [ 325.401536][ T28] Rebooting in 86400 seconds..